WordPress Plugin Vulnerabilities

Paid Business Listings - Blind SQL Injection

Description

Form Submission pbl_listing_pkg_id Parameter

Affects Plugins

Plugin icon
paid-business-listings
No known fix

References

Exploitdb
19481

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
d118ab58-c88d-43fb-838a-5d89ceff7827

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2019-10-21 (about 4 years ago)

Other

Published
Title
Published
2015-06-08
Title
Easy2Map Photos < 1.1.0 - SQL Injection
Published
2014-08-01
Title
IndiaNIC FAQs Manager 1.0 - Blind SQL Injection
Published
2017-08-20
Title
Photo Gallery by WD <= 1.3.50 - Authenticated SQL Injection
Published
2014-08-01
Title
Simple Forum 2.0-2.1 - SQL Injection
Published
2022-03-23
Title
Daily Prayer Time < 2022.03.01 - Unauthenticated SQLi