Lucene search
MitreCVELIST:CVE-2017-12949HistoryOct 03, 2022 - 4:23 p.m.
CVE-2017-12949
2022-10-0316:23:17
mitre
www.cve.org
wordpress
sql injection
csrf
podlove podcast publisher
cve-2017-12949
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF.
Related
wpvulndb
wpvulndb
Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection
2017-08-07 00:00:00
cve
cve
CVE-2017-12949
2022-10-03 16:23:17
wpexploit
wpexploit
Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection
2017-08-07 00:00:00
prion
prion
Design/Logic Flaw
2017-08-18 18:29:00
osv
osv
CVE-2017-12949
2017-08-18 18:29:03
nvd
nvd
CVE-2017-12949
2017-08-18 18:29:03