Lucene search
+L

4 matches found

CNVD
CNVD
•added 2017/09/15 12:00 a.m.•14 views

WordPress surveys SQL injection vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress surveys is a polls plugin developed by Binny VA, an Indian software developer for Wordpress. A SQL injection...

9.8CVSS9.7AI score0.03628EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2017/09/14 1:29 p.m.•15 views

CVE-2017-1002022

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query...

9.8CVSS5.9AI score0.03628EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/14 12:00 a.m.•6 views

CVE-2017-1002022: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query...

9.8CVSS8.2AI score0.03628EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/09/14 12:00 a.m.•1 views

PT-2017-11011

Name of the Vulnerable Software and Affected Versions wordpress plugin surveys version 1.01.8 Description The issue arises from the code in questions.php, which fails to sanitize the survey variable before incorporating it into an SQL query. This lack of sanitization can lead to potential SQL...

9.8CVSS0.03628EPSS
SaveExploits1References5
Rows per page
Query Builder