Lucene search
Bob MatyasWPEX-ID:C3406236-AAEE-480A-8931-79C867252F11HistoryMay 06, 2024 - 12:00 a.m.
KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection
2024-05-0600:00:00
Bob Matyas
52
kkprogressbar2 sql injection admin+ may 20 2024 exploit update
Description The plugin does not sanitize and escape a parameter before using it in a SQL statement, allowing admin users to perform SQL injection attacks
1. Send a POST request to `/wp-admin/admin.php?page=kkpb-add-project` with the BODY `action=edit-project&id=sleep(5)`
2. Observe the delay in responseRelated
wpvulndb
wpvulndb
KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection
2024-05-06 00:00:00
vulnrichment
vulnrichment
CVE-2024-4533 KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection
2024-05-27 06:00:02
cvelist
cvelist
CVE-2024-4533 KKProgressbar2 Free <= 1.1.4.2 - Admin+ SQL Injection
2024-05-27 06:00:02
nvd
nvd
CVE-2024-4533
2024-05-27 06:15:10
cve
cve
CVE-2024-4533
2024-05-27 06:15:10
wordfence
wordfence
AI Score
7.4
Confidence
Low
EPSS
0
Percentile
9.0%
Related for WPEX-ID:C3406236-AAEE-480A-8931-79C867252F11