CVE-2020-27615: WordPress Loginizer < 1.6.4 – Unauthenticated SQL Injection via `log` Parameter

CVE-2020-27615: WordPress Loginizer < 1.6.4 – Unauthenticated SQL Injection via `log` Parameter-渗透云记 - 专注于网络安全与技术分享
CVE-2020-27615: WordPress Loginizer < 1.6.4 – Unauthenticated SQL Injection via `log` Parameter
此内容为付费阅读,请付费后查看
100积分
付费阅读

漏洞标题

CVE-2020-27615: WordPress Loginizer < 1.6.4 – Unauthenticated SQL Injection via `log` Parameter

漏洞描述

The Loginizer plugin before 1.6.4 for WordPress allows SQL injection (with resultant xss), related to loginizer_login_failed and lz_valid_ip.

PoC代码

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享