QwikSec

Security Database

CVE

CWE

Training

CVE-2012-5853

Published: Jan 8, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

SQL injection vulnerability in the "the_search_function" function in cardoza_ajax_search.php in the AJAX Post Search (cardoza-ajax-search) plugin before 1.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the srch_txt parameter in a "the_search_text" action to wp-admin/admin-ajax.php.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://wordpress.org/plugins/cardoza-ajax-search/changelog/

x_refsource_CONFIRM

20121106 Sql injection in AJAX post Search wordpress plugin

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.