Lucene search
K

4 matches found

NVD
NVD
added 2024/05/06 7:15 p.m.10 views

CVE-2024-34412

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Parcel Panel ParcelPanel.This issue affects ParcelPanel: from n/a through 3.8.1...

8.5CVSS8.9AI score0.00224EPSS
Exploits0References1
CVE
CVE
added 2024/05/06 6:12 p.m.54 views

CVE-2024-34412

CVE-2024-34412 affects the ParcelPanel (ParcelPanel for WordPress) plugin for ParcelPanel: vulnerable in versions up to 3.8.1. The issue is an SQL Injection caused by improper neutralization of input elements in SQL commands, enabling attacker-controlled data to be injected into queries. Impact p...

8.5CVSS5.5AI score0.00224EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/06 6:12 p.m.22 views

CVE-2024-34412 WordPress ParcelPanel plugin <= 3.8.1 - Auth. SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Parcel Panel ParcelPanel.This issue affects ParcelPanel: from n/a through 3.8.1...

8.5CVSS7.7AI score0.00224EPSS
Exploits0References1
Patchstack
Patchstack
added 2024/05/06 12:0 a.m.7 views

WordPress ParcelPanel Plugin <= 3.8.1 is vulnerable to SQL Injection

Software ParcelPanel Type Plugin Vulnerable versions = 3.8.1 Fixed in 3.9.0 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-34412 Patch priority High CVSS severity High 8.5 Developer Claim ownership PSID f51d7f941e90 Credits Le Ngoc Anh Required privilege Subscriber Published...

8.5CVSS6.8AI score0.00224EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder