Network Attack Trends: Internet of Threats (November 2020
60
CVE-2020-5766
PoC —CVSS 3.1
7.5 high
EPSS
7%p94
Published
()
Modified
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in SRS Simple Hits Counter Plugin for WordPress 1.0.3 and 1.0.4 allows a remote, unauthenticated attacker to determine the value of database fields.
- Vendors
- srs simple hits counter project
- Products
- srs simple hits counter
- Ecosystems
- WordPress
- Weakness
- CWE-89
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N