CVE-2016-0769
N/A
N/A
Summary
Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the (2) view, (3) mark, or (4) change parameter.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.openwall.com/lists/oss-security/2016/02/02/3
- http://www.securityfocus.com/bid/82347
- http://www.vapid.dhs.org/advisory.php?v=160
References
- http://www.openwall.com/lists/oss-security/2016/02/02/3
- http://www.securityfocus.com/bid/82347
- http://www.vapid.dhs.org/advisory.php?v=160
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.