Lucene search
MitreCVELIST:CVE-2020-8596HistoryFeb 10, 2020 - 9:37 p.m.
CVE-2020-8596
2020-02-1021:37:28
mitre
www.cve.org
0.001 Low
EPSS
Percentile
47.3%
participants-database.php in the Participants Database plugin 1.9.5.5 and previous versions for WordPress has a time-based SQL injection vulnerability via the ascdesc, list_filter_count, or sortBy parameters. It is possible to exfiltrate data and potentially execute code (if certain conditions are met).
Related
wpexploit
wpexploit
Participants Database < 1.9.5.6 - Authenticated Time Based SQL Injection
2020-02-10 00:00:00
cve
cve
CVE-2020-8596
2020-02-11 12:15:21
prion
prion
Sql injection
2020-02-11 12:15:00
patchstack
patchstack
wpvulndb
wpvulndb
Participants Database < 1.9.5.6 - Authenticated Time Based SQL Injection
2020-02-10 00:00:00
nvd
nvd
CVE-2020-8596
2020-02-11 12:15:21