WordPress Plugin Vulnerabilities
Advanced Booking Calendar < 1.6.2 - Unauthenticated SQL Injection
Description
The AJAX action abc_booking_getBookingResult, available to both authenticated and Unauthenticated users did not sanitise the calendarId parameter which was then concatenated to a SQL statement, leading an unauthenticated SQL injection issue. This could be used to retrieve information from the database, such as users' hashed password, username and email address.
Proof of Concept
Affects Plugins
Fixed in 1.6.2 References
Classification
Type
SQLI
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Lenon Leite
Submitter
Lenon Leite
Submitter twitter
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2020-10-22 (about 5 years ago)
Added
2020-10-22 (about 5 years ago)
Last Updated
2020-10-22 (about 5 years ago)
WPScan 