Lucene search
High-Tech Bridge SAPATCHSTACK:2FCCC3A4BC7A3EE1CCDCFFE1A1BD1EC1HistoryFeb 22, 2014 - 12:00 a.m.
WordPress AdRotate Plugin 3.9.4 - SQL Injection
2014-02-2200:00:00
High-Tech Bridge SA
patchstack.com
9
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
This WordPress AdRotate pluginβs clicktracker.php βtrack paramβ parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database.
Solution
Upgrade the plugin to 3.9.5.
| CPE | Name | Operator | Version |
|---|---|---|---|
| adrotate banner manager | le | 3.9.4 |
References
Related
seebug
seebug
WordPress AdRotateζδ»Ά'clicktracker.php'SQL注ε
₯ζΌζ΄
2014-02-24 00:00:00
prion
prion
Sql injection
2014-02-27 15:55:00
htbridge
htbridge
SQL Injection in AdRotate
2014-01-30 00:00:00
securityvulns
securityvulns
SQL Injection in AdRotate
2014-05-04 00:00:00
zdt
zdt
AdRotate 3.9.4 SQL Injection Vulnerability
2014-02-21 00:00:00
openvas
openvas
WordPress AdRotate Plugin 'clicktracker.php' SQL Injection Vulnerability
2014-03-11 00:00:00
dsquare
dsquare
AdRotate library/clicktracker.php track Parameter SQL Injection
2014-03-04 00:00:00
cve
cve
CVE-2014-1854
2014-02-27 15:55:00
checkpoint_advisories
checkpoint_advisories
WordPress Plugin AdRotate SQL Injection (CVE-2014-1854)
2014-03-04 00:00:00
packetstorm
packetstorm
AdRotate 3.9.4 SQL Injection
2014-02-21 00:00:00
wpvulndb
wpvulndb
AdRotate <= 3.9.4 - clicktracker.php track Parameter SQL Injection
2014-08-01 10:58:53
exploitpack
exploitpack
WordPress Plugin AdRotate 3.9.4 - clicktracker.ph?track SQL Injection
2014-02-22 00:00:00
cvelist
cvelist
CVE-2014-1854
2014-02-27 15:00:00
exploitdb
exploitdb
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related for PATCHSTACK:2FCCC3A4BC7A3EE1CCDCFFE1A1BD1EC1