Lucene search
WPScanCVELIST:CVE-2023-5203HistoryDec 26, 2023 - 6:33 p.m.
CVE-2023-5203 WP Sessions Time Monitoring Full Automatic < 1.0.9 - Unauthenticated SQL injection
2023-12-2618:33:07
WPScan
www.cve.org
3
cve-2023-5203
wordpress plugin
sql injection
unauthenticated attacker
sensitive data
EPSS
0.001
Percentile
33.2%
The WP Sessions Time Monitoring Full Automatic WordPress plugin before 1.0.9 does not sanitize the request URL or query parameters before using them in an SQL query, allowing unauthenticated attackers to extract sensitive data from the database via blind time based SQL injection techniques, or in some cases an error/union based technique.
CNA Affected
[
{
"vendor": "Unknown",
"product": "WP Sessions Time Monitoring Full Automatic",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.0.9"
}
],
"defaultStatus": "unaffected",
"collectionURL": "https://wordpress.org/plugins"
}
]Related
wpexploit
wpexploit
vulnrichment
vulnrichment
cve
cve
CVE-2023-5203
2023-12-26 19:15:07
prion
prion
Sql injection
2023-12-26 19:15:00
wpvulndb
wpvulndb
nvd
nvd
CVE-2023-5203
2023-12-26 19:15:07