Lucene search
WpvulndbWPVDB-ID:EF2668A4-B826-4AC8-9DB1-56C4EB2E28C1HistoryDec 09, 2020 - 12:00 a.m.
DiveBook <= 1.1.4 - Unauthenticated SQL Injection
2020-12-0900:00:00
wpscan.com
7
divebook
unauthenticated
sql injection
filter_diver
parameter
vulnerability
EPSS
0.001
Percentile
36.2%
The filter_diver GET parameter, in pages where the DiveBook is embed, does not properly sanitise and validate user data, leading to an Unauthenticated SQL injection vulnerability.
PoC
The PoC will be displayed once the issue has been remediated
Related
cvelist
cvelist
CVE-2020-14207
2020-12-08 19:50:21
patchstack
patchstack
wpexploit
wpexploit
DiveBook <= 1.1.4 - Unauthenticated SQL Injection
2020-12-09 00:00:00
prion
prion
Sql injection
2020-12-08 20:15:00
nvd
nvd
CVE-2020-14207
2020-12-08 20:15:15
cve
cve
CVE-2020-14207
2020-12-08 20:15:15