WordPress Plugin Vulnerabilities

eShop - Authenticated Blind SQL Injection

Description

The eshop WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability.

Affects Plugins

Plugin icon
eshop
No known fix

References

CVE
CVE-2016-0769
URL
http://www.vapidlabs.com/advisory.php?v=160
URL
https://web.archive.org/web/20160308161138/https://permalink.gmane.org/gmane.comp.security.oss.general/18755

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
8.8 (high)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
ee59cf01-df3a-417e-9687-8e906543735d

Timeline

Publicly Published
2016-02-02 (about 8 years ago)
Added
2016-02-02 (about 8 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2014-08-01
Title
Wordpress <= 2.0.6 wp-trackback.php Remote SQL Injection Exploit
Published
2014-08-01
Title
Oberliga - team.php team Parameter SQL Injection
Published
2014-08-01
Title
Leaflet Maps Marker 3.5.2 - Two SQL Injection Vulnerabilities
Published
2014-08-01
Title
FireStorm Professional Real Estate 2.06.01 - xml/marker_listings.php id Parameter SQL Injection
Published
2021-06-29
Title
Popup box < 2.3.4 - Authenticated Blind SQL Injections