Описание
The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filter_diver parameter.
Ссылки
- Release NotesVendor Advisory
- Third Party Advisory
- Release NotesVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:divebook_project:divebook:1.1.4:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 82%
0.01788
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
github
больше 3 лет назад
The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data from the database via the divelog.php filter_diver parameter.
EPSS
Процентиль: 82%
0.01788
Низкий
5.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-89