Lucene search
I0akiN SEC-LABORATORYPATCHSTACK:4F91B67FCE6EEFF19782E62147F07AF6HistorySep 15, 2015 - 12:00 a.m.
WordPress CP Reservation Calendar Plugin 1.1.6 - SQL Injection
2015-09-1500:00:00
i0akiN SEC-LABORATORY
patchstack.com
4
EPSS
0.001
Percentile
46.5%
This WordPress CP Reservation Calendar plugin is prone to an SQL injection via dex_reservations.php. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database.
Solution
Upgrade the plugin.
References
Related
exploitdb
exploitdb
WordPress Plugin CP Reservation Calendar 1.1.6 - SQL Injection
2015-09-15 00:00:00
cve
cve
CVE-2015-7235
2015-09-17 16:59:14
nvd
nvd
CVE-2015-7235
2015-09-17 16:59:14
prion
prion
Sql injection
2015-09-17 16:59:00
cvelist
cvelist
CVE-2015-7235
2015-09-17 16:00:00
wpvulndb
wpvulndb
CP Reservation Calendar <= 1.1.6 - Unauthenticated SQL Injection
2015-09-15 00:00:00