Intrusion PreventionWordPress.Plugin.HTML5.Video.Player.get_view.SQL.Injection
Description
This indicates an attack attempt to exploit an SQL Injection Vulnerability in the HTML5 Video Player WordPress Plugin.
The vulnerability is due to improper validation of user-supplied data. A remote, authenticated attacker could exploit this vulnerability by sending crafted requests to the target server. Successful exploitation could result in arbitrary SQL command execution against the target server's database.
Affected Products
HTML5 Video Player WordPress Plugin version prior to 2.5.25
Impact
System Compromise: Remote attackers can add, view, delete or modify data in the database of the affected application.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://wordpress.org/plugins/html5-video-player/
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 54636 |
| Created | Feb 08, 2024 |
| Updated | Apr 18, 2024 |
| Risk |
|
| CVE ID | CVE-2024-1061 |
| Exploit Prediction Score | 0.69% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |