CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WBW Product Table PRO allows SQL Injection.This issue affects WBW Product Table PRO: from n/a through 1.9.4.
Explanation of Vulnerability in Simple Terms
WBW Product Table PRO versions up to 1.9.4 contain a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries against the database. The vulnerability requires no user interaction and can be exploited over the network. An attacker can read, modify, or delete sensitive data, or disrupt site availability.
What an attacker can do
Execute arbitrary SQL commands to read, modify, or delete database contents without authentication.
Potential impact on your site
Complete compromise of the site database, including user credentials, posts, and configuration data.
Conditions required to exploit
Network access to the affected site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
