Lucene search
PRIOn knowledge basePRION:CVE-2018-3810HistoryJan 01, 2018 - 6:29 a.m.
Authentication flaw
2018-01-0106:29:00
PRIOn knowledge base
www.prio-n.com
3
Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackers to insert arbitrary JavaScript or HTML code (via the sgcgoogleanalytic parameter) that runs on all pages served by WordPress. The saveGoogleCode() function in smartgooglecode.php does not check if the current request is made by an authorized user, thus allowing any unauthenticated user to successfully update the inserted code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| smart_google_code_inserter | lt | 3.5 |
Related
cve
cve
CVE-2018-3810
2018-01-01 06:29:00
patchstack
patchstack
cvelist
cvelist
CVE-2018-3810
2018-01-01 06:00:00
nvd
nvd
CVE-2018-3810
2018-01-01 06:29:00
wpvulndb
wpvulndb
nuclei
nuclei
Oturia WordPress Smart Google Code Inserter <3.5 - Authentication Bypass
2021-03-10 11:36:11
zdt
zdt
exploitpack
exploitpack
openvas
openvas
WordPress Smart Google Code Inserter Plugin < 3.5 Multiple Vulnerabilities
2018-01-02 00:00:00
packetstorm
packetstorm
WordPress Smart Google Code Inserter SQL Injection
2018-01-03 00:00:00
exploitdb
exploitdb