Sql injection

2014-06-0414:55:00

PRIOn knowledge base

www.prio-n.com

9.1 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.1%

JSON

SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an “output CSV” action to pdb-signup/.

CPENameOperatorVersion
participants_databasele1.5.4.8
participants_databaseeq1.5.4.7
participants_databaseeq1.5.4.2
participants_databaseeq1.5.4.4
participants_databaseeq1.5.4.3
participants_databaseeq1.5.4.5
participants_databaseeq1.5.4
participants_databaseeq1.5.4.6
participants_databaseeq1.5.4.1

Name	Operator	Version
participants_database	le	1.5.4.8
participants_database	eq	1.5.4.7
participants_database	eq	1.5.4.2
participants_database	eq	1.5.4.4
participants_database	eq	1.5.4.3
participants_database	eq	1.5.4.5
participants_database	eq	1.5.4
participants_database	eq	1.5.4.6
participants_database	eq	1.5.4.1