Lucene search
K

CVE-2021-24390

🗓️ 06 Sep 2021 11:09:19Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 56 Views🌐 WEB

A proid GET parameter of the WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件 WordPress plugin through 3.7.2 is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2021-24390
6 Sep 202114:40
circl
CNNVD
WordPress 插件 SQL注入漏洞
6 Sep 202100:00
cnnvd
CNVD
WordPress SQL injection vulnerability
8 Sep 202100:00
cnvd
Cvelist
CVE-2021-24390 Alipay <= 3.7.2 - Authenticated SQL Injection
6 Sep 202111:09
cvelist
EUVD
EUVD-2021-11302
7 Oct 202500:30
euvd
NVD
CVE-2021-24390
6 Sep 202111:15
nvd
OSV
CVE-2021-24390
6 Sep 202111:15
osv
Patchstack
WordPress Alipay plugin <= 3.7.2 - Authenticated SQL Injection (SQLi) vulnerability
23 Jul 202100:00
patchstack
Prion
Sql injection
6 Sep 202111:15
prion
Positive Technologies
PT-2021-15923 · WordPress · Wordpress
6 Sep 202100:00
ptsecurity
Rows per page
NVD
Vulners
Node
alipay_projectalipayRange3.7.2wordpress
[
  {
    "product": "WordPress支付宝Alipay|财付通Tenpay|贝宝PayPal集成插件",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "3.7.2",
        "status": "affected",
        "version": "3.7.2",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
proidquery paramwp-admin/options-general.php?page=ws_alipay&action=edit&proid=-5818%20UNION%20ALL%20SELECT 73,73,73,73,73,user(),73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73,73%23SQL injection via unsanitised proid parameter in WordPress Alipay/Tenpay/PayPal pluginCWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:52Current
7.2High risk
Vulners AI Score7.2
CVSS 26.5
CVSS 3.17.2
EPSS0.00567
56