CVE-2018-20556

Published: Mar 18, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the booking_id parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://packetstormsecurity.com/files/151692/WordPress-Booking-Calendar-8.4.3-SQL-Injection.html

x_refsource_MISC

46377

exploit

x_refsource_EXPLOIT-DB

https://gist.github.com/B0UG/a750c2c204825453e6faf898ea6d09f6

x_refsource_MISC

https://vulners.com/exploitdb/EDB-ID:46377

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2018-20556

Description

Affected Products

References