Lucene search

K
wpexploitWpvulndbWPEX-ID:F10CD7D7-6A31-48E5-994C-B100C846001A
HistoryMay 09, 2020 - 12:00 a.m.

Chopslider <= 3.4 - Unauthenticated Blind SQL Injection

2020-05-0900:00:00
wpvulndb
25

EPSS

0.788

Percentile

98.3%

The id parameter of the get_script/index.php page is not sanitised when used in a SQL statement, leading to an unauthenticated blind SQL Injection issue. Vendor was contacted by researcher, on March 3rd, 2020 but no reply was received.

The PoC will be displayed once the issue has been remediated