Lucene search
PRIOn knowledge basePRION:CVE-2021-38324HistorySep 09, 2021 - 7:15 p.m.
Sql injection
2021-09-0919:15:00
PRIOn knowledge base
www.prio-n.com
4
0.002 Low
EPSS
Percentile
61.1%
The SP Rental Manager WordPress plugin is vulnerable to SQL Injection via the orderby parameter found in the ~/user/shortcodes.php file which allows attackers to retrieve information contained in a site’s database, in versions up to and including 1.5.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sp_rental_manager | le | 1.5.3 |
Related
cve
cve
CVE-2021-38324
2021-09-09 19:15:14
nvd
nvd
CVE-2021-38324
2021-09-09 19:15:14
cvelist
cvelist
CVE-2021-38324 SP Rental Manager <= 1.5.3 Unauthenticated SQL Injection
2021-09-08 00:00:00
wpvulndb
wpvulndb
SP Rental Manager <= 1.5.3 - Unauthenticated SQL Injection
2021-09-08 00:00:00
patchstack
patchstack