{"id":3356,"date":"2024-03-28T19:45:18","date_gmt":"2024-03-28T19:45:18","guid":{"rendered":"http:\/\/127.0.0.1\/wp-erp-1-12-9-sql-injection-de-autenticacion-accountingmanager\/"},"modified":"2024-03-28T19:45:18","modified_gmt":"2024-03-28T19:45:18","slug":"wp-erp-1-12-9-sql-injection-de-autenticacion-accountingmanager","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/wp-erp-1-12-9-sql-injection-de-autenticacion-accountingmanager\/","title":{"rendered":"WP ERP <= 1.12.9 – SQL Injection de Autenticaci\u00f3n (AccountingManager+)"},"content":{"rendered":"
<\/p>\n
El plugin WP ERP | Soluci\u00f3n completa de recursos humanos con reclutamiento y listados de empleos | CRM y contabilidad de WooCommerce para WordPress es vulnerable a SQL Injection basada en tiempo a trav\u00e9s del par\u00e1metro id en la ruta REST erp\/v1\/accounting\/v1\/vendors\/1\/products\/ en todas las versiones hasta, e incluyendo, la 1.12.9 debido a un escape […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1067],"class_list":["post-3356","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-0956"],"yoast_head":"\n