Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Sendit WP Newsletter <= 2.5.1 - Authenticated (admin+) SQL Injection
Vulnerability Description
The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator users does not sanitise, validate or escape the id_lista POST parameter before using it in SQL statement, therefore leading to Blind SQL Injection.
CVSS Information
N/A
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Vulnerability Title
WordPress SQL注入漏洞
Vulnerability Description
WordPress是WordPress（Wordpress）基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。 WordPress 的 Sendit WP Newsletter 存在 SQL注入漏洞，该漏洞源于页面列表中的管理功能未能对POST参数进行合理转义，攻击者可通过该漏洞执行非法SQL语句。以下产品及型号受到影响：Sendit WP Newsletter WordPress 2.5.1。
CVSS Information
N/A
Vulnerability Type
N/A