Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbLarry W. CashdollarWPVDB-ID:61727560-1055-45B6-82E8-6A118164996E
HistoryAug 22, 2015 - 12:00 a.m.

DukaPress <= 2.5.9 - Unauthenticated Blind SQL Injection

2015-08-2200:00:00
Larry W. Cashdollar
wpscan.com
8

0.002 Low

EPSS

Percentile

57.0%

JSON

The code in dukapress/download.php does not sanitize user input from $_GET[‘id’] before passing it to query() allowing SQL to be injected. The user is not required to be logged into WordPress in order to exploit this vulnerability.

CPENameOperatorVersion
dukapresslt2.5.9.1

Related

cve 1
prion 1
nvd 1
cvelist 1
cve
cve
CVE-2015-1000011
2016-10-06 14:59:12
prion
prion
Sql injection
2016-10-06 14:59:00
nvd
nvd
CVE-2015-1000011
2016-10-06 14:59:12
cvelist
cvelist
CVE-2015-1000011
2016-10-06 14:00:00

0.002 Low

EPSS

Percentile

57.0%

JSON
Related for WPVDB-ID:61727560-1055-45B6-82E8-6A118164996E
cve1prion1nvd1cvelist1