CVE-2014-9178

Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin (sp-client-document-manager) 2.4.1…

published December 2, 2014

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin (sp-client-document-manager) 2.4.1 and earlier for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) vendor_email[] parameter in the email_vendor function or id parameter in the (2) download_project, (3) download_archive, or (4) remove_cat function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04632 · 91.6th percentile
Published
2014-12-02T16:00Z
EPSS history
Timeline
  • 02 DEC 16:00Z
    Multiple SQL injection vulnerabilities in classes/ajax.php in the Smarty Pants Plugins SP Project & Document Manager plugin (sp-client-document-manager) 2.4.1…
    cvelistv5