cleantalk
Vulnerabilities and Security Researches

Welcart e-Commerce, 65e643c4-f55e-47bf-8ba3-136c54aff1b2

Application

Welcart e-Commerce

Published on
-
Research Description
Welcart e-Commerce [usc-e-shop] < 2.1.1 Welcart e-Commerce &lt; 2.1.1 - Authenticated SQL Injection The Welcart e-Commerce WordPress plugin, less than version 2.1.1 and possibly below, was vulnerable to authenticated SQLI Injection in the search[order_column][0] POST parameter of the &quot;/wp-admin/admin.php?page=usces_orderlist&quot; page.
Affected versions
max 2.1.1.
Status
vulnerable