PT-2011-1774 · WordPress · Event Registration Plugin

CVE-2010-4839

Publicado

2011-09-13

Atualizado

2011-09-14

CVSS v2.0

7.5

Alta

Vetor

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Event Registration plugin versions 5.32 and earlier

Description The issue allows remote attackers to execute arbitrary SQL commands via the event id parameter in a "register" action.

Recommendations For versions 5.32 and earlier, update to a version later than 5.32 to resolve the issue.

Exploit

Correção

RCE

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2010-4839

Event Registration Plugin