Lucene search
N/APATCHSTACK:1C2C5450D4106E102D5E29ABFC133881HistoryJan 02, 2015 - 12:00 a.m.
WordPress Cart66 Lite Plugin <= 1.5.3 - SQL Injection
2015-01-0200:00:00
N/A
patchstack.com
7
EPSS
0.001
Percentile
47.0%
This vulnerability allows authenticated users to execute arbitrary SQL commands via the “q” parameter in a promotionProductSearch action to wp-admin/admin-ajax.php.
Solution
Update the plugin.
Related
cve
cve
CVE-2014-9442
2015-01-02 19:59:11
prion
prion
Sql injection
2015-01-02 19:59:00
wpvulndb
wpvulndb
Cart66 Lite <= 1.5.3 - SQL Injection
2015-01-01 16:42:34
cvelist
cvelist
CVE-2014-9442
2015-01-02 19:00:00
nvd
nvd
CVE-2014-9442
2015-01-02 19:59:11