Lucene search
David HayesPATCHSTACK:C20A97A6D24F858B07AAFC44F70AF3DFHistoryOct 11, 2017 - 12:00 a.m.
WordPress WPHRM plugin <= 1.0 - Authenticated SQL Injection
2017-10-1100:00:00
David Hayes
patchstack.com
4
0.001 Low
EPSS
Percentile
48.7%
WordPress WPHRM plugin Authenticated SQL Injection allows an attacker to inject SQL commands via the employee_id $_GET param.
Solution
Update the plugin.
Related
cve
cve
CVE-2017-14848
2017-10-03 01:29:02
wpexploit
wpexploit
WPHRM <= 1.0 - Authenticated SQL Injection
2017-09-09 00:00:00
cvelist
cvelist
CVE-2017-14848
2017-10-02 21:00:00
exploitpack
exploitpack
WordPress Plugin WPHRM - SQL Injection
2017-09-29 00:00:00
wpvulndb
wpvulndb
WPHRM <= 1.0 - Authenticated SQL Injection
2017-09-09 00:00:00
prion
prion
Sql injection
2017-10-03 01:29:00
nvd
nvd
CVE-2017-14848
2017-10-03 01:29:02
exploitdb
exploitdb
WordPress Plugin WPHRM - SQL Injection
2017-09-29 00:00:00