CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in enituretechnology LTL Freight Quotes – FreightQuote Edition ltl-freight-quotes-freightquote-edition allows SQL Injection.This issue affects LTL Freight Quotes – FreightQuote Edition: from n/a through <= 2.3.11.
Explanation of Vulnerability in Simple Terms
The LTL Freight Quotes plugin contains a SQL injection vulnerability in versions up to 2.3.11. An attacker can inject malicious SQL commands through unfiltered input, allowing them to read sensitive data from the site's database. No authentication is required. The vulnerability also impacts site availability.
What an attacker can do
Read sensitive data from the site database, including user information and configuration details.
Potential impact on your site
Attackers can extract customer data, user credentials, and other sensitive information stored in your database.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
