Lucene search
+L

89 matches found

Cvelist
Cvelist
added 2022/03/07 8:16 a.m.42 views

CVE-2022-0349 NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

The NotificationX WordPress plugin before 2.3.9 does not sanitise and escape the nxid parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection...

10AI score0.34359EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/03/07 12:00 a.m.8 views

WordPress plugin NotificationX SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress NotificationX Plugin versions prior to 2.3.9. The...

9.8CVSS6.2AI score0.34359EPSS
SaveExploits2References2
WPVulnDB
WPVulnDB
added 2022/02/28 12:00 a.m.10 views

NotificationX < 2.3.12 - Unauthenticated SQLi

The plugin does not validate and escape the id parameter in its notificationx/v1/notification REST endpoint before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL Injection attacks. PoC The apikey is the md5 of the homeurl either with http or https protocol...

2.1AI score
SaveExploits0References1Affected Software1
wpexploit
wpexploit
added 2022/02/28 12:00 a.m.736 views

NotificationX < 2.3.12 - Unauthenticated SQLi

The plugin does not validate and escape the id parameter in its notificationx/v1/notification REST endpoint before using it in a SQL statement, which could allow unauthenticated attackers to perform SQL Injection attacks. The apikey is the md5 of the homeurl either with http or https protocol...

2.4AI score
SaveExploits0References1
Patchstack
Patchstack
added 2022/02/28 12:00 a.m.21 views

WordPress NotificationX plugin <= 2.3.11 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by mikemyers in WordPress NotificationX plugin versions = 2.3.11. Solution Update the WordPress NotificationX plugin to the latest available version at least 2.3.12...

3.7AI score
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2022/02/02 12:00 a.m.44 views

WordPress NotificationX plugin <= 2.3.8 - Unauthenticated Blind SQL Injection (SQLi) vulnerability

Unauthenticated Blind SQL Injection SQLi vulnerability discovered by Krzysztof Zając in WordPress NotificationX plugin versions = 2.3.8. Solution Update the WordPress NotificationX plugin to the latest available version at least 2.3.9...

9.8CVSS3.2AI score0.34359EPSS
SaveExploits2References3Affected Software1
WPVulnDB
WPVulnDB
added 2022/02/02 12:00 a.m.36 views

NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

The plugin does not sanitise and escape the nxid parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection PoC time wget 'https://example.com/?restroute=/notificationx/v1/analytics' --post-data="nxid=sleep2 -- x" -q -O-...

9.8CVSS2AI score0.34359EPSS
SaveExploits2Affected Software1
wpexploit
wpexploit
added 2022/02/02 12:00 a.m.979 views

NotificationX < 2.3.9 - Unauthenticated Blind SQL Injection

The plugin does not sanitise and escape the nxid parameter before using it in a SQL statement, leading to an Unauthenticated Blind SQL Injection time wget 'https://example.com/?restroute=/notificationx/v1/analytics' --post-data="nxid=sleep2 -- x" -q -O-...

9.8CVSS2.2AI score0.34359EPSS
SaveExploits2
Patchstack
Patchstack
added 2020/09/16 12:00 a.m.11 views

WordPress NotificationX plugin <= 1.8.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability found by Jerome Bruandet NinTechNet in WordPress NotificationX plugin versions = 1.8.2. Solution Update the WordPress NotificationX plugin to the latest available version at least 1.8.3...

3.9AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder