Lucene search
PRIOn knowledge basePRION:CVE-2023-4797HistoryJan 16, 2024 - 4:15 p.m.
Sql injection
2024-01-1616:15:00
PRIOn knowledge base
www.prio-n.com
5
wordpress plugin
sql injection
nvd
administrator
server security
The Newsletters WordPress plugin before 4.9.3 does not properly escape user-controlled parameters when they are appended to SQL queries and shell commands, which could enable an administrator to run arbitrary commands on the server.
| CPE | Name | Operator | Version |
|---|---|---|---|
| newsletters | lt | 4.9.3 |
Related
wpvulndb
wpvulndb
Newsletter Lite < 4.9.3 - Admin+ Command Injection
2023-10-05 00:00:00
nvd
nvd
CVE-2023-4797
2024-01-16 16:15:13
cve
cve
CVE-2023-4797
2024-01-16 16:15:13
cvelist
cvelist
CVE-2023-4797 Newsletter Lite < 4.9.3 - Admin+ Command Injection
2024-01-16 15:56:40
wpexploit
wpexploit
Newsletter Lite < 4.9.3 - Admin+ Command Injection
2023-10-05 00:00:00