Lucene search
PRIOn knowledge basePRION:CVE-2017-12949HistoryAug 18, 2017 - 6:29 p.m.
Design/Logic Flaw
2017-08-1818:29:00
PRIOn knowledge base
www.prio-n.com
3
lib\modules\contributors\contributor_list_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injection in the orderby parameter to wp-admin/admin.php, exploitable through CSRF.
| CPE | Name | Operator | Version |
|---|---|---|---|
| podlove_podcast_publisher | eq | 2.5.3 |
Related
wpvulndb
wpvulndb
Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection
2017-08-07 00:00:00
cvelist
cvelist
CVE-2017-12949
2022-10-03 16:23:17
osv
osv
CVE-2017-12949
2017-08-18 18:29:03
nvd
nvd
CVE-2017-12949
2017-08-18 18:29:03
cve
cve
CVE-2017-12949
2022-10-03 16:23:17
wpexploit
wpexploit
Podlove Podcast Publisher <= 2.5.3 - Authenticated SQL Injection
2017-08-07 00:00:00