Lucene search
WpvulndbWPVDB-ID:1A924BA5-4E85-4B54-8F76-C6BCA13078E5HistoryJun 08, 2023 - 12:00 a.m.
WP EasyCart < 5.4.11 - Administrator+ Time-based SQL Injection
2023-06-0800:00:00
wpscan.com
4
plugin
sql
queries
database
security
0.001 Low
EPSS
Percentile
30.6%
The plugin does not properly escape user-supplied ‘orderby’ parameter and lacks adequate preparation of SQL queries. This results in possible appending of additional SQL queries into pre-existing ones, potentially leading to extraction of sensitive data from the database.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp-easycart | lt | 5.4.11 |
Related
cve
cve
CVE-2023-3023
2023-07-12 05:15:09
nvd
nvd
CVE-2023-3023
2023-07-12 05:15:09
prion
prion
Sql injection
2023-07-12 05:15:00
cvelist
cvelist
CVE-2023-3023
2023-07-12 04:38:49
wordfence
wordfence