CVE-2023-1207
Assigner: WPScan
Published: 2023-05-15T12:15:30.045Z
State: PUBLISHED
title: HTTP Headers < 1.18.8 - Admin+ SQL Injection
problemTypes: descriptions: description: CWE-89 SQL Injection
type: CWE
affected: vendor: Unknown
product: HTTP Headers
versions: status: affected
versionType: custom
version: 0
lessThan: 1.18.8
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
descriptions: value: This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability.
credits: value: qerogram(at Kakao Style Corp.)
type: finder
value: WPScan
type: coordinator
source: discovery: EXTERNAL
x_generator: engine: WPScan CVE Generator