{"id":3690,"date":"2024-04-30T09:45:25","date_gmt":"2024-04-30T09:45:25","guid":{"rendered":"http:\/\/127.0.0.1\/barcode-scanner-with-inventory-order-manager-1-5-4-inyeccion-sql-autenticada-suscriptor\/"},"modified":"2024-04-30T09:45:25","modified_gmt":"2024-04-30T09:45:25","slug":"barcode-scanner-with-inventory-order-manager-1-5-4-inyeccion-sql-autenticada-suscriptor","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/barcode-scanner-with-inventory-order-manager-1-5-4-inyeccion-sql-autenticada-suscriptor\/","title":{"rendered":"Barcode Scanner with Inventory & Order Manager <= 1.5.4 – Inyecci\u00f3n SQL Autenticada (Suscriptor+)"},"content":{"rendered":"
<\/p>\n
El plugin Barcode Scanner and Inventory manager para WordPress es vulnerable a Inyecci\u00f3n SQL ciega a trav\u00e9s del par\u00e1metro ‘currentIds’ en todas las versiones hasta la 1.5.4, debido a la insuficiente escapada en el par\u00e1metro proporcionado por el usuario y falta de preparaci\u00f3n suficiente en la consulta SQL existente. Esto permite a atacantes autenticados, con […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1400],"class_list":["post-3690","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-2661"],"yoast_head":"\n