Lucene search
K

4 matches found

CNVD
CNVD
added 2017/09/15 12:0 a.m.1 views

WordPress surveys SQL injection vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress surveys is a polls plugin developed by Binny VA, an Indian software developer for Wordpress. A SQL injection...

9.8CVSS9.7AI score0.10906EPSS
Exploits1References1
CNVD
CNVD
added 2017/09/15 12:0 a.m.1 views

WordPress surveys 'survey_id' variable SQL injection vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress surveys is a polls plugin developed by Binny VA, an Indian software developer for Wordpress. A SQL injection...

9.8CVSS9.7AI score0.10906EPSS
Exploits1References1
CNVD
CNVD
added 2017/09/15 12:0 a.m.1 views

WordPress surveys 'action' variable SQL injection vulnerability

WordPress is a set of blogging platform developed by WordPress Software Foundation using PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.WordPress surveys is a polls plugin developed by Binny VA, an Indian software developer for Wordpress. A SQL injection...

9.8CVSS9.7AI score0.10906EPSS
Exploits1References1
OSV
OSV
added 2017/09/14 1:29 p.m.1 views

CVE-2017-1002022

Vulnerability in wordpress plugin surveys v1.01.8, The code in questions.php does not sanitize the survey variable before placing it inside of an SQL query...

9.8CVSS5.9AI score
Exploits0References3
Rows per page
Query Builder