Vulnerability in wordpress plugin rk-responsive-contact-form v1.0, The variable $delid isn't sanitized before being passed into an SQL query in file ./rk-responsive-contact-form/include/rk_user_list.php.
References
Link | Resource |
---|---|
https://wordpress.org/plugins/rk-responsive-contact-form/ | Product Third Party Advisory |
http://www.vapidlabs.com/advisory.php?v=198 | Exploit Patch Third Party Advisory |
https://wpvulndb.com/vulnerabilities/8889 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2017-09-14 06:29
Updated : 2017-09-20 11:23
NVD link : CVE-2017-1002027
Mitre link : CVE-2017-1002027
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
rayanehdownload
- rk-responsive-contact-form