CVE-2023-49776

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a through 2.6...

CVE-2023-49776

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hakan Demiray Sayfa Sayac.This issue affects Sayfa Sayac: from n/a through 2.6...

CVE-2023-49776

The CVE-2023-49776 entry documents an SQL Injection vulnerability in the WordPress plugin Sayfa Sayaç (Sayfa Sayac) version up to 2.6. The root cause is improper neutralization of special elements in SQL commands, due to insufficient escaping of user-supplied input and lack of proper preparation ...

WordPress Sayfa Sayaç Plugin <= 2.6 is vulnerable to SQL Injection

Software Sayfa Sayaç Type Plugin Vulnerable versions = 2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-49776 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID b5614af7ec8d Credits Rafie Muhammad Patchstack Required privilege...