Unscored CVE-2019-12570 EUVD-2019-4164GHSA-fg87-34v2-8x2r

A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to…

Published Jul 3, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

A SQL injection vulnerability in the Xpert Solution "Server Status by Hostname/IP" plugin 4.6 for WordPress allows an authenticated user to execute arbitrary SQL commands via GET parameters.

References

https://github.com/ivoschyk-cs/exploit_wp/blob/master/CVE-2019-12570
https://wpvulndb.com/vulnerabilities/9964