CVEs-PoC/2014/CVE-2014-5185.md

CVE-2014-5185

Description

SQL injection vulnerability in the Quartz plugin 1.01.1 for WordPress allows remote authenticated users with Contributor privileges to execute arbitrary SQL commands via the quote parameter in an edit action in the quartz/quote_form.php page to wp-admin/edit.php.

POC

Reference

No PoCs from references.

Github

• https://github.com/20142995/nuclei-templates