Lucene search
MitreCVELIST:CVE-2014-9442HistoryJan 02, 2015 - 7:00 p.m.
CVE-2014-9442
2015-01-0219:00:00
mitre
www.cve.org
5
cve-2014-9442
sql injection
cart66 lite plugin
wordpress
remote authenticated users
arbitrary sql commands
promotionproductsearch action.
SQL injection vulnerability in models/Cart66Ajax.php in the Cart66 Lite plugin before 1.5.4 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the q parameter in a promotionProductSearch action to wp-admin/admin-ajax.php.
Related
nvd
nvd
CVE-2014-9442
2015-01-02 19:59:11
wpvulndb
wpvulndb
Cart66 Lite <= 1.5.3 - SQL Injection
2015-01-01 16:42:34
patchstack
patchstack
WordPress Cart66 Lite Plugin <= 1.5.3 - SQL Injection
2015-01-02 00:00:00
cve
cve
CVE-2014-9442
2015-01-02 19:59:11
prion
prion
Sql injection
2015-01-02 19:59:00