diff --git a/2018/1002xxx/CVE-2018-1002000.json b/2018/1002xxx/CVE-2018-1002000.json index fd6798d72b0..05aea3652ed 100644 --- a/2018/1002xxx/CVE-2018-1002000.json +++ b/2018/1002xxx/CVE-2018-1002000.json @@ -18,7 +18,7 @@ "description_data": [ { "lang": "eng", - "value": "There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. CVE-2018-1002000 There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request. In line 69 of file controllers/list.php: 65 $wpdb->query("DELETE FROM ".BFT_USERS." WHERE id IN (".$_POST['del_ids'].")"); del_ids is not sanitized properly." + "value": "There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request." } ] },