Lucene search
+L

2 matches found

Prion
Prion
•added 2017/04/12 3:59 p.m.•22 views

Sql injection

SQL injection in the Spider Event Calendar aka spider-event-calendar plugin before 1.5.52 for WordPress is exploitable with the orderby parameter to calendarfunctions.php or widgetThemefunctions.php, related to frontend/frontendfunctions.php...

7.5CVSS9.7AI score0.02267EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/04/12 12:00 a.m.•3 views

CVE-2017-7719: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the Spider Event Calendar aka spider-event-calendar plugin before 1.5.52 for WordPress is exploitable with the orderby parameter to calendarfunctions.php or widgetThemefunctions.php, related to frontend/frontendfunctions.php...

9.8CVSS5.9AI score0.02267EPSS
SaveExploits1References2
Rows per page
Query Builder