{"id":3289,"date":"2024-03-21T21:45:16","date_gmt":"2024-03-21T21:45:16","guid":{"rendered":"http:\/\/127.0.0.1\/network-summary-2-0-11-inyeccion-sql-sin-autenticacion\/"},"modified":"2024-03-21T21:45:16","modified_gmt":"2024-03-21T21:45:16","slug":"network-summary-2-0-11-inyeccion-sql-sin-autenticacion","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/network-summary-2-0-11-inyeccion-sql-sin-autenticacion\/","title":{"rendered":"Network Summary <= 2.0.11 – Inyecci\u00f3n SQL sin autenticaci\u00f3n"},"content":{"rendered":"
<\/p>\n
El plugin Network Summary para WordPress es vulnerable a Inyecci\u00f3n SQL a trav\u00e9s del par\u00e1metro ‘category’ en todas las versiones hasta, e incluyendo, la 2.0.11 debido a un escape insuficiente en el par\u00e1metro suministrado por el usuario y la falta de preparaci\u00f3n suficiente en la consulta SQL existente. Esto permite que atacantes no autenticados a\u00f1adan […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1001],"class_list":["post-3289","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-2804"],"yoast_head":"\n