5 matches found
EUVD-2022-15743
Malicious code in bioql PyPI...
EUVD-2022-15448
Malicious code in bioql PyPI...
CVE-2022-0267: Improper Neutralization of Special Elements used in an SQL Command
The AdRotate WordPress plugin before 5.8.22 does not sanitise and escape the adrotateaction before using it in a SQL statement via the adrotaterequestaction function available to admins, leading to a SQL injection...
PT-2021-15683
Name of the Vulnerable Software and Affected Versions: AdRotate WordPress plugin versions prior to 5.8.4 Description: The issue is related to unvalidated input in the AdRotate WordPress plugin, which leads to authenticated SQL injection. This can be achieved via the id parameter and requires an...
CVE-2021-24138: Improper Neutralization of Special Elements used in an SQL Command
Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param "id". This requires an admin privileged user...