Lucene search
WpvulndbWPVDB-ID:A6C40B1A-C1B2-4D22-8242-41F8B5364546HistoryMay 16, 2023 - 12:00 a.m.
Multiple Page Generator < 3.3.18 - SQLi via CSRF
2023-05-1600:00:00
wpscan.com
5
csrf
sql injection
dos
software
0.001 Low
EPSS
Percentile
44.0%
The plugin does not have CSRF check in the projects_list function, and does not escape the orderly & order parameters before using them in a SQL statement, which could allow attackers to make logged in administrators perform SQL Injection and lead to DoS via a CSRF attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| multiple-pages-generator-by-porthas | lt | 3.3.18 |
Related
nvd
nvd
CVE-2023-2608
2023-05-17 02:15:10
cve
cve
CVE-2023-2608
2023-05-17 02:15:10
prion
prion
Cross site request forgery (csrf)
2023-05-17 02:15:00
cvelist
cvelist
CVE-2023-2608
2023-05-17 01:58:49
wordfence
wordfence