Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-0520

EPSS 0.59% · P69
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-0520

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) from_date or (2) to_date parameter to spy.php.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
WordPress WassUp插件多个SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WordPress是一款免费的论坛Blog系统。 WordPress的WassUp插件存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 WordPress的WassUp插件中'main.php文件没有正确地验证对to_date参数的输入： # if (isset($_GET['to_date'])) $to_date = HTMLentities(strip_tags($_GET['to_date'])); # ........... # spyview($from_date,$to_dat
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-0520

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-0520

Please Login to view more intelligence information

Same Patch Batch · n/a · 2008-01-31 · 26 CVEs total

CVE-2008-0512Joomla! Fq组件 'index.php' SQL注入漏洞
CVE-2008-0525PatchLink Update多个不安全的临时文件创建漏洞
CVE-2008-0524Yamaha RT Series Routers 'management interface' 跨站请求伪造漏洞
CVE-2008-0523SoftCart 'SoftCart.exe' 跨站脚本攻击漏洞
CVE-2008-0522Hal Networks shopping-cart 跨站脚本攻击漏洞
CVE-2008-0521Bubbling Library 多个目录遍历漏洞
CVE-2008-0519Mambo/Joomla! Atapin Jokes组件 'index.php'SQL注入漏洞
CVE-2008-0518Mambo 和Joomla!的Recipes组件 'index.php' SQL注入漏洞
CVE-2008-0517Mambo 和Joomla!的Darko Selesi EstateAgent组件 'index.php' SQL注入漏洞
CVE-2008-0516SQLiteManager 'spaw/dialogs/confirm.php' 远程文件PHP代码注入漏洞
CVE-2008-0515Mambo/Joomla musepoes组件'index.php' SQL注入漏洞
CVE-2008-0514Mambo/Joomla Glossary组件 'index.php' SQL注入漏洞
CVE-2008-0513phpCMS 'parser/parser.php' 目录遍历漏洞
CVE-2007-4998Linux cp命令 重建符号链接攻击漏洞
CVE-2008-0511Joomla! MaMML组件 'index.php' SQL注入漏洞
CVE-2008-0510Mambo Newsletter组件 'index.php' SQL注入漏洞
CVE-2008-0509IBM AIX 'piox25.c/piox25remote.sh' 远程文件缓冲区溢出漏洞
CVE-2008-0508WordPress的 Dean's Permalinks Migration 'deans_permalinks_migration.php'跨站请求伪造漏洞
CVE-2008-0507WordPress 'adclick.php' 输入验证漏洞
CVE-2008-0506Coppermine Photo Gallery 'include/imageObjectIM.class.php' 输入验证漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-0520

No comments yet

Leave a comment