high8.8
CVE-2015-9460
The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
Impact
The booking-system plugin before 2.1 for WordPress has DOPBSPBackEndTranslation::display SQL injection via the language parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pinpoint | Pinpoint Booking System | before 2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://cinu.pl/research/wp-plugins/mail_dad9a09a6290ae952bfd97010583bdbd.html
- https://wordpress.org/plugins/booking-system/#developers
- https://wpvulndb.com/vulnerabilities/8339
- http://cinu.pl/research/wp-plugins/mail_dad9a09a6290ae952bfd97010583bdbd.html
- https://wordpress.org/plugins/booking-system/#developers
- https://wpvulndb.com/vulnerabilities/8339