3 matches found
CVE-2020-14207
The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filterdiver parameter...
CVE-2020-14207: Improper Neutralization of Special Elements used in an SQL Command
The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filterdiver parameter...
PT-2020-13933
Name of the Vulnerable Software and Affected Versions DiveBook plugin version 1.1.4 Description The issue allows unauthenticated users to retrieve data from the database due to a SQL injection flaw within the "divelog.php" file. Specifically, the filter diver parameter in the "divelog.php" file i...