Описание
SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.
Ссылки
- ExploitPatch
- Vendor Advisory
- ExploitPatch
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.2.3 (включая)
Одно из
cpe:2.3:a:landing_pages_project:landing_pages_plugin:*:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.3.7:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.3.8:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.3.9:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.4.1:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.4.2:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.4.4:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.5.1:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.5.3:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.5.6:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.7.1:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.7.3:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.7.9:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.8.1:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.8.4:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.8.5:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.8.6:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.9.0:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.9.3:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.9.4:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.0.9.9:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1.0.1:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1.7:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1.8:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.1.9:-:*:*:*:wordpress:*:*
cpe:2.3:a:landing_pages_project:landing_pages_plugin:1.2.1:-:*:*:*:wordpress:*:*
EPSS
Процентиль: 78%
0.01168
Низкий
7.5 High
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.
EPSS
Процентиль: 78%
0.01168
Низкий
7.5 High
CVSS2
Дефекты
CWE-89