Lucene search
PRIOn knowledge basePRION:CVE-2020-27481HistoryNov 12, 2020 - 2:15 p.m.
Sql injection
2020-11-1214:15:00
PRIOn knowledge base
www.prio-n.com
4
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of “wp_ajax_nopriv” call in WordPress, which allows any unauthenticated user to get access to the function “gdlr_lms_cancel_booking” where POST Parameter “id” was sent straight into SQL query without sanitization.
| CPE | Name | Operator | Version |
|---|---|---|---|
| good_learning_management_system | le | 2.1.4 |
Related
wpvulndb
wpvulndb
Good LMS < 2.1.5 - Unauthenticated SQL Injection
2020-11-12 00:00:00
nvd
nvd
CVE-2020-27481
2020-11-12 14:15:23
cve
cve
CVE-2020-27481
2020-11-12 14:15:23
nuclei
nuclei
Good Layers LMS Plugin <= 2.1.4 - SQL Injection
2022-09-30 16:54:07
wpexploit
wpexploit
Good LMS < 2.1.5 - Unauthenticated SQL Injection
2020-11-12 00:00:00
cvelist
cvelist
CVE-2020-27481
2020-11-12 13:47:40
checkpoint_advisories
checkpoint_advisories