CVE-2020-14206

概要

参考情報

• wordpress.org/plugins/divebook · Release Notes
• hooperlabs.xyz/disclosures/divebook.php · Exploit

divebook のその他の脆弱性

• CVE-2020-14207中 5.3The DiveBook plugin 1.1.4 for WordPress was prone to a SQL injection within divelog.php, allowing unauthenticated users to retrieve data fro…
• CVE-2020-14205中 5.3The DiveBook plugin 1.1.4 for WordPress is prone to improper access control in the Log Dive form because it fails to perform authorization c…