Lucene search
K

CVE-2024-0566

🗓️ 12 Feb 2024 16:05:59Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 77 Views🌐 WEB

The Smart Manager WordPress plugin before 8.28.0 SQL injection vulnerabilit

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
GithubExploit
Exploit for SQL Injection in Storeapps Smart_Manager
9 May 202417:30
githubexploit
Circl
CVE-2024-0566
12 Feb 202417:22
circl
CNNVD
WordPress Plugin Smart Manager SQL Injection Vulnerability
12 Feb 202400:00
cnnvd
Cvelist
CVE-2024-0566 Smart Manager < 8.28.0 - Admin+ SQL Injection
12 Feb 202416:05
cvelist
Exploit DB
Smart Manager 8.27.0 - Post-Authenticated SQL Injection
16 Apr 202500:00
exploitdb
EUVD
EUVD-2024-16359
3 Oct 202520:07
euvd
NVD
CVE-2024-0566
12 Feb 202416:15
nvd
Packet Storm
📄 Smart Manager 8.27.0 SQL Injection
16 Apr 202500:00
packetstorm
Patchstack
WordPress Smart Manager Plugin < 8.28.0 is vulnerable to SQL Injection
13 Feb 202400:00
patchstack
Prion
Sql injection
12 Feb 202416:15
prion
Rows per page
NVD
Vulners
Node
storeappssmart_managerRange<8.28.0wordpress
[
  {
    "vendor": "Unknown",
    "product": "Smart Manager",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "8.28.0"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  }
]
ParameterPositionPathDescriptionCWE
sort_params[sortOrder]request bodywp-admin/admin-ajax.php?action=sm_beta_include_fileSQL injection in sortOrder parameter within POST body leading to time-based or other SQL injection when processed in SQL statement.CWE-89
sort_params[sortOrder]request bodywp-admin/admin-ajax.php?action=sm_beta_include_fileSQL injection in sortOrder parameter within POST body triggering additional SQL payloads in the second PoC.CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 May 2025 21:16Current
7.2High risk
Vulners AI Score7.2
CVSS 3.17.2
EPSS0.02523
SSVC
77