Lucene search

K
wpexploitWpvulndbWPEX-ID:691DA8EE-42CC-4B01-B0BB-A19D43FACB6C
HistoryJul 10, 2020 - 12:00 a.m.

SRS Simple Hits Counter <= 1.0.4 - Unauthenticated Blind SQL Injection

2020-07-1000:00:00
wpvulndb
12

Alex Peña from Tenable discovered a blind SQL injection which could allow unauthenticated remote attackers to retrieve data from the DBMS. Note: The vendor attempted a fix in v1.0.4, which is incomplete.

The PoC will be displayed once the issue has been remediated
Related for WPEX-ID:691DA8EE-42CC-4B01-B0BB-A19D43FACB6C