CVE-2020-37242: WordPress Plugin Supsystic Ultimate Maps 1.1.12 SQL Injection via sidx
Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'sidx' GET parameter. Attackers can send crafted requests to the getListForTbl action with boolean-based blind or time-based blind SQL injection payloads to extract sensitive database information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37242?
CVE-2020-37242 has a medium severity rating due to its ability to allow unauthenticated SQL injection attacks.
How do I fix CVE-2020-37242?
To fix CVE-2020-37242, you should update the Supsystic Ultimate Maps plugin to the latest version.
Who is affected by CVE-2020-37242?
CVE-2020-37242 affects users of Supsystic Ultimate Maps version 1.1.12.
What type of vulnerability is CVE-2020-37242?
CVE-2020-37242 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries.
Can CVE-2020-37242 be exploited by authenticated users?
No, CVE-2020-37242 can be exploited by unauthenticated users.