Lucene search
PRIOn knowledge basePRION:CVE-2023-5041HistoryJan 17, 2024 - 3:15 p.m.
Design/Logic Flaw
2024-01-1715:15:00
PRIOn knowledge base
www.prio-n.com
2
design flaw
wordpress
sql injection
database query
The Track The Click WordPress plugin before 0.3.12 does not properly sanitize query parameters to the stats REST endpoint before using them in a database query, allowing a logged in user with an author role or higher to perform time based blind SQLi attacks on the database.
| CPE | Name | Operator | Version |
|---|---|---|---|
| track_the_click | lt | 0.3.12 |
Related
wpexploit
wpexploit
Track The Click < 0.3.12 - Author+ Time-Based Blind SQL Injection
2023-09-26 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2023-5041
2024-01-17 15:15:10
wpvulndb
wpvulndb
Track The Click < 0.3.12 - Author+ Time-Based Blind SQL Injection
2023-09-26 00:00:00
cve
cve
CVE-2023-5041
2024-01-17 15:15:10
wordfence
wordfence