Lucene search

K
wpvulndbWpvulndbWPVDB-ID:F10CD7D7-6A31-48E5-994C-B100C846001A
HistoryMay 09, 2020 - 12:00 a.m.

Chopslider <= 3.4 - Unauthenticated Blind SQL Injection

2020-05-0900:00:00
wpscan.com
8

The id parameter of the get_script/index.php page is not sanitised when used in a SQL statement, leading to an unauthenticated blind SQL Injection issue. Vendor was contacted by researcher, on March 3rd, 2020 but no reply was received.

PoC

The PoC will be displayed once the issue has been remediated

CPENameOperatorVersion
chopslidereq*