Vulners
Lucene search
WordPress Appointment Booking Calendar 1.1.7 SQL Injection Vulnerability
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | WordPress Appointment Booking Calendar Plugin SQL Injection Vulnerability | 10 Oct 201500:00 | – | cnvd |
 | CVE-2015-7319 | 29 Sep 201519:00 | – | cve |
 | CVE-2015-7319 | 29 Sep 201519:00 | – | cvelist |
 | EUVD-2015-7244 | 7 Oct 202500:30 | – | euvd |
 | CVE-2015-7319 | 29 Sep 201519:59 | – | nvd |
 | WordPress Appointment Booking Calendar Plugin <= 1.1.7 - SQL Injection | 22 Sep 201500:00 | – | patchstack |
 | Sql injection | 29 Sep 201519:59 | – | prion |
| Sql injection | 22 Aug 201913:15 | – | prion |
 | CVE-2016-10916 | 9 Jan 202611:11 | – | redhatcve |
 | CVE-2015-7319 - SQL Injection in Appointment Booking Calendar 1.1.7 WordPress plugin | 26 Oct 201500:00 | – | securityvulns |
10
Vulnerability title: SQL Injection in Appointment Booking Calendar 1.1.7 WordPress plugin
CVE: CVE-2015-7319
Vendor: WordPress DWBooster
Product: Appointment Booking Calendar
Affected version: 1.1.7
Fixed version: 1.1.8
Reported by: Ibéria Medeiros
Vulnerability Details:
=====================
It was discovered that no protection against SQL injection attack was implemented, resulting in an attacker being able to update the username, gaining access with the new user.
The Appointment Booking Calendar 1.1.7 WordPress plugin is vulnerable to a SLI injection (SQLI) vulnerability.
A SQLI vector was identified in cpabc_appointments_admin_int_calendar_list.inc.php
System affected:
===============
Any system that access to a web site developed by WordPress CMS version 4.3.1 or higher and uses the Appointment Booking Calendar plugin v.1.1.7 or early.
Solution:
========
Update to Appointment Booking Calendar 1.1.8 plugin
Disclosure Timeline:
===================
Vendor Notification: September 22, 2015
Vendor fixed vulnerability: September 22, 2015
Public Disclosure: September 26, 2015
# 0day.today [2018-04-12] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
06 Oct 2015 00:00Current
EPSS0.00417