10 matches found
CVE-2024-55978
CVE-2024-55978 Code Generator Pro = 1.2 - 未认证 SQL 注入 描述 WordPress 的 Code Generator Pro 插件在 1.2 及更早版本中存在 SQL 注入漏洞,原因是对用户提供的参数转义不足,且对现有 SQL 查询缺乏充分的预处理。这使得未经认证的攻击者可以将额外的 SQL 查询追加到已有查询中,从而提取数据库中的敏感信息。 详细信息 类型 :插件 Slug :code-generator-pro 受影响版本 :1.2 CVSS 评分 :9.8 CVSS 等级 :严重 CVSS 向量...
EUVD-2024-52878
Malicious code in bioql PyPI...
CVE-2024-55978
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...
WordPress Code Generator Pro 1.2 SQL Injection Vulnerability
CVE-2024-55978 Code Generator Pro = 1.2 - Unauthenticated SQL Injection Description The Code Generator Pro plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th...
CVE-2024-55978
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...
CVE-2024-55978
CVE-2024-55978 affects Code Generator Pro (WordPress plugin) up to version 1.2 and is described as an unauthenticated SQL Injection due to improper handling of input. Public coverage in connected sources references unauthenticated SQLi on Code Generator Pro and notes that the vulnerability is cur...
CVE-2024-55978 WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...
CVE-2024-55978 WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WalletStation Code Generator Pro code-generator-pro allows SQL Injection.This issue affects Code Generator Pro: from n/a through = 1.2...
WordPress plugin Code Generator Pro SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
WordPress Code Generator Pro plugin <= 1.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Code Generator Pro versions = 1.2...