Описание
A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type parameter. The order_type parameter makes a SQL query using unfiltered data. This vulnerability allows a remote attacker to steal user information.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.0.0 (исключая)
cpe:2.3:a:mangboard:mang_board:*:*:*:*:*:wordpress:*:*
EPSS
Процентиль: 70%
0.00647
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-89
CWE-89
Связанные уязвимости
github
больше 3 лет назад
A vulnerability was found in Mangboard(WordPress plugin). A SQL-Injection vulnerability was found in order_type parameter. The order_type parameter makes a SQL query using unfiltered data. This vulnerability allows a remote attacker to steal user information.
EPSS
Процентиль: 70%
0.00647
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-89
CWE-89