Lucene search
Anant ShrivastavaPATCHSTACK:9DC8CA07CC6ECB7D8D6AF48913CF64FCHistoryAug 06, 2014 - 12:00 a.m.
WordPress Quartz Plugin <= 1.01.1 - SQL Injection
2014-08-0600:00:00
Anant Shrivastava
patchstack.com
4
0.001 Low
EPSS
Percentile
44.1%
Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands in an edit action in the quartz/quote_form.php page to wp-admin/edit.php via the “quote” parameter.
Solution
Update the plugin.
Related
wpvulndb
wpvulndb
Quartz Plugin 1.01.1 - SQL Injection
2014-09-27 12:14:04
nvd
nvd
CVE-2014-5185
2014-08-06 19:55:04
prion
prion
Sql injection
2014-08-06 19:55:00
cvelist
cvelist
CVE-2014-5185
2022-10-03 16:20:43
cve
cve
CVE-2014-5185
2022-10-03 16:20:43