CVE-2022-2840
Assigner: WPScan
Published: 2022-09-19T00:00:00
State: PUBLISHED
title: Zephyr Project Manager < 3.2.5 - Multiple Unauthenticated SQLi
descriptions: value: The Zephyr Project Manager WordPress plugin before 3.2.5 does not sanitise and escape various parameters before using them in SQL statements via various AJAX actions available to both unauthenticated and authenticated users, leading to SQL injections
affected: vendor: Unknown
product: Zephyr Project Manager
versions: version: 3.2.5
status: affected
lessThan: 3.2.5
versionType: custom
credits: value: Rizacan TUFAN
problemTypes: descriptions: type: CWE
description: CWE-89 SQL Injection
cweId: CWE-89
x_generator: WPScan CVE Generator
source: discovery: EXTERNAL