Sql injection

Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 searchcolumn or 2 switch parameter...

CVE-2015-7791: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 searchcolumn or 2 switch parameter...

PT-2015-7613

Name of the Vulnerable Software and Affected Versions Collne Welcart plugin versions prior to 1.5.3 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the searchcolumn or switch parameter in the admin.php file. Recommendations For...

Welcart vulnerable to SQL injection

Overview Welcart provided by Collne Inc. is a WordPress plugin. Welcart contains an SQL injection vulnerability CWE-89 due to a flaw in the processing of searchcolumn and switch parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...