CVE-2014-100003

2015-01-1311:00:00

mitre

www.cve.org

sql injection

yourmembers plugin

wordpress

remote attackers

arbitrary sql commands

AI Score

8.6

Confidence

Low

EPSS

0.001

Percentile

42.0%

JSON

SQL injection vulnerability in includes/ym-download_functions.include.php in the Code Futures YourMembers plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ym_download_id parameter to the default URI.

References

packetstormsecurity.com/files/128668/YourMembers-Blind-SQL-Injection.html

www.exploit-db.com/exploits/34968