WordPress WP AutoComplete Search 1.0.4 SQL Injection

Exploit Title: WP AutoComplete 1.0.4 - Unauthenticated SQLi Date: 30/06/2023 Exploit Author: Matin nouriyan matitanium Version: = 1.0.4 CVE: CVE-2022-4297 Vendor Homepage: https://wordpress.org/support/plugin/wp-autosearch/ Tested on: Kali linux --------------------------------------- The WP...

Wordpress WP AutoComplete 1.0.4 - Unauthenticated SQL injection Vulnerability

Exploit Title: WP AutoComplete 1.0.4 - Unauthenticated SQLi Date: 30/06/2023 Exploit Author: Matin nouriyan matitanium Version: = 1.0.4 CVE: CVE-2022-4297 Vendor Homepage: https://wordpress.org/support/plugin/wp-autosearch/ Tested on: Kali linux --------------------------------------- The WP...

WP AutoComplete 1.0.4 - Unauthenticated SQLi

Exploit Title: WP AutoComplete 1.0.4 - Unauthenticated SQLi Date: 30/06/2023 Exploit Author: Matin nouriyan matitanium Version: = 1.0.4 CVE: CVE-2022-4297 Vendor Homepage: https://wordpress.org/support/plugin/wp-autosearch/ Tested on: Kali linux --------------------------------------- The WP...

CVE-2022-4297

creationtimestamp| type| source ---|---|--- 2023-01-03 00:30:00+00:00| seen| https://t.me/cibsecurity/55782 2025-04-11 13:51:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11425...

CVE-2022-4297

The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX available to unauthenticated users, leading to an unauthenticated SQL injection...

CVE-2022-4297 WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi

The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX available to unauthenticated users, leading to an unauthenticated SQL injection...

CVE-2022-4297 WP AutoComplete Search <= 1.0.4 - Unauthenticated SQLi

The WP AutoComplete Search WordPress plugin through 1.0.4 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX available to unauthenticated users, leading to an unauthenticated SQL injection...

CVE-2022-4297

CVE-2022-4297 affects the WP AutoComplete Search WordPress plugin (v1.0.4 and earlier). The root cause is failure to sanitize/escape a parameter used in an SQL statement inside an unauthenticated AJAX endpoint (q parameter), enabling unauthenticated SQL injection with high impact. Public exploit ...

CVE-2021-4297

creationtimestamp| type| source ---|---|--- 2023-01-01 22:15:48+00:00| seen| https://t.me/cibsecurity/55730...

CVE-2021-4297

The CVE-2021-4297 entry concerns trampgeek jobe

SUSE: Security Advisory (SUSE-SU-2018:4297-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS : runC vulnerabilities (USN-4297-1)

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4297-1 advisory. It was discovered that runC incorrectly checked mount targets. An attacker with a malicious container image could possibly mount over the /proc directory...

CVE-2019-4297

IBM Robotic Process Automation with Automation Anywhere 11 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability to make unauthorized queries or modify the LDAP content. IBM X-Force ID: 160761...

CVE-2019-4297

IBM Robotic Process Automation with Automation Anywhere (version 11) is affected by CVE-2019-4297 due to an LDAP injection in the LDAP handling path. The vulnerability allows a remote authenticated attacker to craft requests that can query or modify LDAP content. The IBM security bulletin confirm...

Security Bulletin: IBM Robotic Process Automation is vulnerable to LDAP Injection (CVE-2019-4297)

Summary IBM Robotic Process Automation is vulnerable to LDAP Injection. Vulnerability Details CVEID: CVE-2019-4297 DESCRIPTION: IBM Robotic Process Automation with Automation Anywhere could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, a...

Debian DSA-4297-1 : chromium-browser - security update

Two vulnerabilities have been discovered in the chromium web browser. Kevin Cheung discovered an error in the WebAssembly implementation and evil1m0 discovered a URL spoofing issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian...

CVE-2017-4297

CVE-2017-4297 entry is rejected/not used as explicitly stated in the Initial Description.

CVE-2015-4297

Open redirect vulnerability (CVE-2015-4297) in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary sites via crafted HTTP request parameters, enabling phishing-like redirection. Multiple sources (CNVD/CVE records) confirm the issue and note t...

Design/Logic Flaw

Unspecified vulnerability in the JPublisher component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows remote authenticated users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2014-4290, CVE-2014-4291, CVE-2014-4292,...

CVE-2014-4297

Technical details for CVE-2014-4297 are not publicly available in the provided documents. The connected EUVD entries describe malware reports but do not specify affected products, versions, impact, or fixes. Monitor for updates.