WordPress Content Timeline plugin <=4.4.2 - Multiple Blind SQL Injection vulnerabilities

Multiple Blind SQL Injection vulnerabilities found by Jeroen ITNerdbox in premium WordPress plugin - Content Timeline =4.4.2 . It is possible to execute arbitrary SQL commands via the id parameter contenttimelineclass.php, contenttimelineedit.php, contenttimelineindex.php. Solution We were unable...

CVE-2017-14507

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 timeline parameter in contenttimelineclass.php; or the id parameter to 2 pages/contenttimelineedit.php or 3 pages/contenttimelineindex.php...

CVE-2017-14507

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 timeline parameter in contenttimelineclass.php; or the id parameter to 2 pages/contenttimelineedit.php or 3 pages/contenttimelineindex.php...

Sql injection

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 timeline parameter in contenttimelineclass.php; or the id parameter to 2 pages/contenttimelineedit.php or 3 pages/contenttimelineindex.php...

WordPress Content Timeline Plugin SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress Content Timeline plugin. An attacker can exploit the vulnerability to...

CVE-2017-14507

CVE-2017-14507 : Multiple blind SQL injection vulnerabilities in the WordPress plugin “Content Timeline” (versions up to 4.4.2) allow remote attackers to execute arbitrary SQL via GET parameters, specifically the timeline parameter in content_timeline_class.php and the id parameter in pages/conte...

CVE-2017-14507

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 timeline parameter in contenttimelineclass.php; or the id parameter to 2 pages/contenttimelineedit.php or 3 pages/contenttimelineindex.php...

Content Timeline <= 4.4.2 - Multiple Blind SQL Injection

Multiple Blind SQL injections in the premium 'Content Timeline' Plugin. One unauthenticated and two authenticated injections. Contacted the author twice without any response. History: 09-16-2017 Contacted the author 09-16-2017 Requested CVE-ID 09-18-2017 CVE-ID Received 09-18-2017 Contacted the...

Content Timeline <= 4.4.2 - Multiple Blind SQL Injection

Multiple Blind SQL injections in the premium 'Content Timeline' Plugin. One unauthenticated and two authenticated injections. Contacted the author twice without any response. History: 09-16-2017 Contacted the author 09-16-2017 Requested CVE-ID 09-18-2017 CVE-ID Received 09-18-2017 Contacted the...

WordPress Plugin Content Timeline - SQL Injection

Exploit Title: Multiple Blind SQL Injections Wordpress Plugin: Content Timeline Google Dork: - Date: September 16, 2017 Exploit Author: Jeroen - ITNerdbox Vendor Homepage: http://www.shindiristudio.com/ Software Link:...

WordPress Plugin Content Timeline - SQL Injection

WordPress Plugin Content Timeline - SQL Injection Exploit Title: Multiple Blind SQL Injections Wordpress Plugin: Content Timeline Google Dork: - Date: September 16, 2017 Exploit Author: Jeroen - ITNerdbox Vendor Homepage: http://www.shindiristudio.com/ Software Link:...

Joomla WMT Content Timeline 1.0 Component - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component WMT Content Timeline v1.0 - SQL Injection Google Dork: inurl:index.php?option=comwmtcontenttimeline Date: 17.02.2017 Vendor Homepage: http://devecostudio.com Software Buy:...

Joomla WMT Content Timeline 1.0 SQL Injection

Exploit Title: Joomla! Component WMT Content Timeline v1.0 - SQL Injection Google Dork: inurl:index.php?option=comwmtcontenttimeline Date: 17.02.2017 Vendor Homepage: http://devecostudio.com Software Buy:...

Joomla! Component WMT Content Timeline 1.0 - id SQL Injection

Joomla! Component WMT Content Timeline 1.0 - id SQL Injection Exploit Title: Joomla! Component WMT Content Timeline v1.0 - SQL Injection Google Dork: inurl:index.php?option=comwmtcontenttimeline Date: 17.02.2017 Vendor Homepage: http://devecostudio.com Software Buy:...

Joomla! Component WMT Content Timeline 1.0 - &#039;id&#039; SQL Injection

Exploit Title: Joomla! Component WMT Content Timeline v1.0 - SQL Injection Google Dork: inurl:index.php?option=comwmtcontenttimeline Date: 17.02.2017 Vendor Homepage: http://devecostudio.com Software Buy:...