WordPress Appointment Booking Calendar Plugin <= 1.1.7 - SQL Injection - Patchstack

Vulnerability Database

WordPress Appointment Booking Calendar Plugin <= 1.1.7 - SQL Injection

appointment-booking-calendar

Software

Appointment Booking Calendar

Versions

<= 1.1.7

Disclosure date

2015-09-22

CVE

CVE-2015-7319

References

CVE Mitre

Credits

Classification

SQL Injection

OWASP Top 10

A1: Injection

Are your websites subject to this vulnerability?

Details

This vulnerability allows an attacker to execute arbitrary SQL commands via unspecified vectors that are related to updating the username.

Solution

Update the plugin.

Found a vulnerability that puts your sites at risk?

Found a vulnerability? Help us secure the web and join our community of ethical hackers.

Are you the developer of this software? Hire our researchers for a thorough security audit.