Unscored CVE-2020-5651 EUVD-2020-26812GHSA-9996-r9fx-jwv9

SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a sp…

Published Oct 21, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: Tips and Tricks HQ Product: Simple Download Monitor

Description

SQL injection vulnerability in Simple Download Monitor 3.8.8 and earlier allows remote attackers to execute arbitrary SQL commands via a specially crafted URL.

Affected products

Vendor	Product	Affected	Fixed
Tips and Tricks HQ	Simple Download Monitor	3.8.8 and earlier	—

References

https://wordpress.org/plugins/simple-download-monitor/
https://jvn.jp/en/jp/JVN31425618/index.html