Description

SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

Remediation

References

CVE-2008-0616

Related Vulnerabilities

WordPress Plugin Advanced Booking Calendar Cross-Site Scripting (1.6.6)

WordPress Plugin Welcart e-Commerce PHP Object Injection (1.9.3)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-36470)

Drupal Improper Removal of Sensitive Information Before Storage or Transfer Vulnerability (CVE-2022-31043)

WordPress Plugin Captcha by BestWebSoft Multiple Cross-Site Scripting Vulnerabilities (4.1.5)

Severity

Medium

Classification

CVE-2008-0616 CWE-138

Tags

Missing Update Known Vulnerabilities