|
Description
|
|
Two vulnerabilities have been discovered in the Event Registration plugin for WordPress, which can be exploited by malicious people to conduct SQL injection attacks.
1) Input passed via the "event_id" parameter to an events page (when "regevent_action" is set to "register") is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.
This vulnerability is confirmed in version 5.32. Other versions may also be affected.
2) Input passed via the "id" parameter to wp-content/plugins/event-registration/event_registration_export.php is not properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code
Successful exploitation requires that "magic_quotes_gpc" is disabled.
This vulnerability is confirmed in version 5.43. Other versions may also be affected.
|
