{"id":3761,"date":"2024-05-21T17:45:17","date_gmt":"2024-05-21T17:45:17","guid":{"rendered":"http:\/\/127.0.0.1\/business-directory-plugin-vulnerabilidad-de-inyeccion-sql-sin-autenticacion-a-traves-del-parametro-listingfields\/"},"modified":"2024-05-21T17:45:17","modified_gmt":"2024-05-21T17:45:17","slug":"business-directory-plugin-vulnerabilidad-de-inyeccion-sql-sin-autenticacion-a-traves-del-parametro-listingfields","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/business-directory-plugin-vulnerabilidad-de-inyeccion-sql-sin-autenticacion-a-traves-del-parametro-listingfields\/","title":{"rendered":"Business Directory Plugin \u2013 Vulnerabilidad de Inyecci\u00f3n SQL sin autenticaci\u00f3n a trav\u00e9s del par\u00e1metro listingfields"},"content":{"rendered":"
<\/p>\n
La vulnerabilidad CVE-2024-4443 afecta al plugin Business Directory Plugin \u2013 Easy Listing Directories for WordPress en versiones hasta 6.4.2, permitiendo a atacantes no autenticados realizar Inyecci\u00f3n SQL basada en tiempo a trav\u00e9s del par\u00e1metro ‘listingfields’. Esto puede conducir a la extracci\u00f3n de informaci\u00f3n sensible de la base de datos. La vulnerabilidad surge debido a la […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[1471],"class_list":["post-3761","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2024-4443"],"yoast_head":"\n