Description
Multiple SQL injection vulnerabilities in oc-admin/ajax/ajax.php in OSClass before 2.3.5 allow remote attackers to execute arbitrary SQL commands via the id parameter in a (1) edit_category_post or (2) enable_category action to index.php.
Remediation
References
Related Vulnerabilities
Apache Tomcat Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-6357)
WordPress Plugin Contact Form Email Information Disclosure (1.2.66)
WordPress Plugin Advanced Order Export For WooCommerce Cross-Site Scripting (3.1.3)
WordPress Plugin WP Intercom-Slack for WordPress Information Disclosure (1.2.1)
PHP Integer Overflow or Wraparound Vulnerability (CVE-2017-5340)