Description
mooSocial Store Plugin 2.6 contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries through the product parameter in URL rewrite functionality. Attackers can inject SQL code using boolean-based blind, time-based blind, or stacked query techniques in the product URI parameter to extract sensitive database information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Moosocial | mooSocial Store Plugin | 2.6 | — |
References
- ExploitDB-45330 exploit
- Reference third-party-advisory
- Official Product Homepage product
- VulnCheck Advisory: mooSocial Store Plugin 2.6 SQL Injection via product parameter third-party-advisory