Overview
- Description
- Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brandon White Author Discussion allows Blind SQL Injection.This issue affects Author Discussion: from n/a through 0.2.2.
- Source
- audit@patchstack.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Severity
- HIGH
Weaknesses
- audit@patchstack.com
- CWE-89
Social media
- Hype score
- Not currently trending
CVE-2024-49609 Blind SQL Injection Vulnerability in Brandon White Author Discussion A Blind SQL Injection vulnerability is present in Brandon White's Author Discussion software. This problem is due to improper ha... https://t.co/aqZxEkcIGS
@VulmonFeeds
20 Oct 2024
63 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[CVE-2024-49609: HIGH] Vulnerability in Brandon White Author Discussion leads to Blind SQL Injection in versions up to 0.2.2. Critical cyber security flaw risks data compromise.#cybersecurity,#vulnerability https://t.co/ItgGQUfeEN https://t.co/Aipe2y3MCr
@CveFindCom
20 Oct 2024
27 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-49609 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brandon White Author Discussion allows Blind SQL Injection.This … https://t.co/TeKJsgjw7B
@CVEnew
20 Oct 2024
550 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:brandonwhite:author_discussion:*:*:*:*:*:wordpress:*:*",
"vulnerable": true,
"matchCriteriaId": "2C80FEDA-81B8-4152-92BE-0E7451BC3417",
"versionEndIncluding": "0.2.2"
}
],
"operator": "OR"
}
]
}
]