CVE-2017-14848

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• WordPress Plugin WPHRM - SQL Injection2017-09-29 · webapps · php

Impact

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://wpvulndb.com/vulnerabilities/8929
• https://www.exploit-db.com/exploits/42924/
• https://wpvulndb.com/vulnerabilities/8929
• https://www.exploit-db.com/exploits/42924/