CVE-2020-27481

CRITICALNuclei

goodlayers good_learning_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2020-27481 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlr_lms_cancel_booking" where POST Parameter "id" was sent straight into SQL query without sanitization.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Oct 10, 2020 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

good_learning_management_system

Browse goodlayers / good_learning_management_system
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALGood Layers LMS Plugin <= 2.1.4 - SQL InjectionCVSS 9.8

An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin <= 2.1.4 exists due to the usage of "wp_ajax_nopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlr_lms_cancel_booking" where POST Parameter "id" was sent straight into SQL query without sanitization.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.

Remediation

Upgrade to the latest version of the Good Layers LMS Plugin (2.1.5 or higher) to mitigate this vulnerability.

WeaknessesCWE-89
Authorsedoardottt
Template tagstime-based-sqlicvecve2020goodlayerslmssqliwpscangoodlayerswordpressvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:goodlayers:good_learning_management_system:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/652eaef8-5a3c-4a2d-ac60-b5414565c397 https://gist.github.com/0xx7/a7aaa8b0515139cf7e30c808c8d54070 https://nvd.nist.gov/vuln/detail/CVE-2020-27481

Source: ProjectDiscovery

References

2