Logo
Explore Help
Sign In
admin/cve
1
0
Fork 0
You've already forked cve
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-28 01:04:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2021/CVE-2021-25076.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

1.8 KiB
Raw Blame History

CVE-2021-25076

Description

The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL injection. Due to the lack of sanitisation and escaping, this could also lead to Reflected Cross-Site Scripting

POC

Reference

  • http://packetstormsecurity.com/files/166071/WordPress-WP-User-Frontend-3.5.25-SQL-Injection.html
  • https://wpscan.com/vulnerability/6d3eeba6-5560-4380-a6e9-f008a9112ac6

Github

  • https://github.com/0xAbbarhSF/CVE-2021-25076
  • https://github.com/0xStarFord/CVE-2021-25076
  • https://github.com/ARPSyndicate/cvemon
  • https://github.com/Enes4xd/Enes4xd
  • https://github.com/Hacker5preme/Exploits
  • https://github.com/NaInSec/CVE-PoC-in-GitHub
  • https://github.com/SYRTI/POC_to_review
  • https://github.com/WhooAmii/POC_to_review
  • https://github.com/cr0ss2018/cr0ss2018
  • https://github.com/enesamaafkolan/enesamaafkolan
  • https://github.com/ezelnur6327/Enes4xd
  • https://github.com/ezelnur6327/enesamaafkolan
  • https://github.com/ezelnur6327/ezelnur6327
  • https://github.com/k0mi-tg/CVE-POC
  • https://github.com/manas3c/CVE-POC
  • https://github.com/nomi-sec/PoC-in-GitHub
  • https://github.com/trhacknon/Pocingit
  • https://github.com/whoforget/CVE-POC
  • https://github.com/youwizard/CVE-POC
  • https://github.com/zecool/cve
Powered by Gitea Version: 1.23.1 Page: 344ms Template: 2ms
English
Bahasa Indonesia Deutsch English Español Français Gaeilge Italiano Latviešu Magyar nyelv Nederlands Polski Português de Portugal Português do Brasil Suomi Svenska Türkçe Čeština Ελληνικά Български Русский Українська فارسی മലയാളം 日本語 简体中文 繁體中文(台灣) 繁體中文(香港) 한국어
Licenses API