From 73c93f2d9789f4ba296af6c1c511c8d1ef8bbd74 Mon Sep 17 00:00:00 2001 From: CVE Team Date: Mon, 20 Sep 2021 11:01:03 +0000 Subject: [PATCH] "-Synchronized-Data." --- 2021/24xxx/CVE-2021-24741.json | 154 ++++++++++++++++----------------- 1 file changed, 77 insertions(+), 77 deletions(-) diff --git a/2021/24xxx/CVE-2021-24741.json b/2021/24xxx/CVE-2021-24741.json index 9a9b1641563..b88a9f12d9f 100644 --- a/2021/24xxx/CVE-2021-24741.json +++ b/2021/24xxx/CVE-2021-24741.json @@ -1,85 +1,85 @@ { - "CVE_data_meta": { - "ID": "CVE-2021-24741", - "ASSIGNER": "contact@wpscan.com", - "STATE": "PUBLIC", - "TITLE": "Support Board < 3.3.4 - Multiple Unauthenticated SQL Injections" - }, - "data_format": "MITRE", - "data_type": "CVE", - "data_version": "4.0", - "generator": "WPScan CVE Generator", - "affects": { - "vendor": { - "vendor_data": [ - { - "vendor_name": "Unknown", - "product": { - "product_data": [ - { - "product_name": "Support Board", - "version": { - "version_data": [ - { - "version_affected": "<", - "version_name": "3.3.4", - "version_value": "3.3.4" + "CVE_data_meta": { + "ID": "CVE-2021-24741", + "ASSIGNER": "contact@wpscan.com", + "STATE": "PUBLIC", + "TITLE": "Support Board < 3.3.4 - Multiple Unauthenticated SQL Injections" + }, + "data_format": "MITRE", + "data_type": "CVE", + "data_version": "4.0", + "generator": "WPScan CVE Generator", + "affects": { + "vendor": { + "vendor_data": [ + { + "vendor_name": "Unknown", + "product": { + "product_data": [ + { + "product_name": "Support Board", + "version": { + "version_data": [ + { + "version_affected": "<", + "version_name": "3.3.4", + "version_value": "3.3.4" + } + ] + } + } + ] } - ] } - } ] - } } - ] - } - }, - "description": { - "description_data": [ - { - "lang": "eng", - "value": "The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before using them in SQL statements, leading to SQL injections which are exploitable by unauthenticated users." - } - ] - }, - "references": { - "reference_data": [ - { - "refsource": "MISC", - "url": "https://wpscan.com/vulnerability/ccf293ec-7607-412b-b662-5e237b8690ca", - "name": "https://wpscan.com/vulnerability/ccf293ec-7607-412b-b662-5e237b8690ca" - }, - { - "refsource": "MISC", - "url": "https://medium.com/@lijohnjefferson/multiple-sql-injection-unauthenticated-in-support-board-v-3-3-3-3e9b4214a4f9", - "name": "https://medium.com/@lijohnjefferson/multiple-sql-injection-unauthenticated-in-support-board-v-3-3-3-3e9b4214a4f9" - }, - { - "refsource": "MISC", - "url": "https://board.support/changes", - "name": "https://board.support/changes" - } - ] - }, - "problemtype": { - "problemtype_data": [ - { - "description": [ - { - "value": "CWE-89 SQL Injection", - "lang": "eng" - } + }, + "description": { + "description_data": [ + { + "lang": "eng", + "value": "The Support Board WordPress plugin before 3.3.4 does not escape multiple POST parameters (such as status_code, department, user_id, conversation_id, conversation_status_code, and recipient_id) before using them in SQL statements, leading to SQL injections which are exploitable by unauthenticated users." + } ] - } - ] - }, - "credit": [ - { - "lang": "eng", - "value": "John Jefferson Li" + }, + "references": { + "reference_data": [ + { + "refsource": "MISC", + "url": "https://medium.com/@lijohnjefferson/multiple-sql-injection-unauthenticated-in-support-board-v-3-3-3-3e9b4214a4f9", + "name": "https://medium.com/@lijohnjefferson/multiple-sql-injection-unauthenticated-in-support-board-v-3-3-3-3e9b4214a4f9" + }, + { + "refsource": "MISC", + "url": "https://wpscan.com/vulnerability/ccf293ec-7607-412b-b662-5e237b8690ca", + "name": "https://wpscan.com/vulnerability/ccf293ec-7607-412b-b662-5e237b8690ca" + }, + { + "refsource": "MISC", + "url": "https://board.support/changes", + "name": "https://board.support/changes" + } + ] + }, + "problemtype": { + "problemtype_data": [ + { + "description": [ + { + "value": "CWE-89 SQL Injection", + "lang": "eng" + } + ] + } + ] + }, + "credit": [ + { + "lang": "eng", + "value": "John Jefferson Li" + } + ], + "source": { + "discovery": "UNKNOWN" } - ], - "source": { - "discovery": "UNKNOWN" - } } \ No newline at end of file