TrueBooker 漏洞列表

TrueBooker 是一个用于 WordPress 的预约和服务管理插件，旨在帮助用户轻松管理在线预约和服务。TrueBooker 插件的 /wp-content/plugins/truebooker-appointment-booking/main/truebooker-service-price.php 文件存在 SQL 注入漏洞。攻击者可以通过构造恶意的 SQL 查询，未经授权地访问或修改数据库中的敏感信息，从而对系统的完整性和机密性造成威胁。

The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.

The TrueBooker Appointment Booking and Scheduler Plugin. plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 1.0.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.