Lucene search

CVE-2014-1854

🗓️ 27 Feb 2014 15:15:55Reported by mitreType

cve🔗 web.nvd.nist.gov👁 94 Views🌐 WEB

SQL injection in AdRotate Pro & Free plugin allows remote attackers to execute arbitrary SQL commands via track parameter

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 16
seebug.org	WordPress AdRotate插件'clicktracker.php'SQL注入漏洞	24 Feb 201400:00	–	seebug
Prion	Sql injection	27 Feb 201415:55	–	prion
Exploit DB	WordPress Plugin AdRotate 3.9.4 - 'clicktracker.ph?track' SQL Injection	22 Feb 201400:00	–	exploitdb
Cvelist	CVE-2014-1854	27 Feb 201415:00	–	cvelist
Patchstack	WordPress AdRotate Plugin 3.9.4 - SQL Injection	22 Feb 201400:00	–	patchstack
exploitpack	WordPress Plugin AdRotate 3.9.4 - clicktracker.ph?track SQL Injection	22 Feb 201400:00	–	exploitpack
htbridge	SQL Injection in AdRotate	30 Jan 201400:00	–	htbridge
0day.today	AdRotate 3.9.4 SQL Injection Vulnerability	21 Feb 201400:00	–	zdt
Dsquare	AdRotate library/clicktracker.php track Parameter SQL Injection	4 Mar 201400:00	–	dsquare
NVD	CVE-2014-1854	27 Feb 201415:55	–	nvd

Nvd

Node

adrotateplugin adrotateMatch3.9.freewordpress

adrotateplugin adrotateMatch3.9.prowordpress

adrotateplugin adrotateMatch3.9.1freewordpress

adrotateplugin adrotateMatch3.9.1prowordpress

adrotateplugin adrotateMatch3.9.2freewordpress

adrotateplugin adrotateMatch3.9.2prowordpress

adrotateplugin adrotateMatch3.9.3freewordpress

adrotateplugin adrotateMatch3.9.3prowordpress

adrotateplugin adrotateMatch3.9.4freewordpress

adrotateplugin adrotateMatch3.9.4prowordpress

adrotateplugin adrotateMatch3.9.5prowordpress

Source	Link
secunia	www.secunia.com/advisories/57079
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/91253
adrotateplugin	www.adrotateplugin.com/2014/01/adrotate-pro-3-9-6-and-adrotate-free-3-9-5
securityfocus	www.securityfocus.com/bid/65709
exploit-db	www.exploit-db.com/exploits/31834
securityfocus	www.securityfocus.com/archive/1/531176/100/0/threaded
htbridge	www.htbridge.com/advisory/HTB23201

Parameter	Position	Path	Description	CWE
track	query param	/wp-content/plugins/adrotate/library/clicktracker.php	SQL injection vulnerability allows remote attackers to execute arbitrary SQL commands via the track parameter.	CWE-89

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Feb 2014 15:55Current

8.4High risk

Vulners AI Score8.4

CVSS27.5

EPSS0.15497

CWE-89