Lucene search
Anant ShrivastavaPATCHSTACK:6163AC1C8DEBE399919ECCE1699B8E09HistoryAug 06, 2014 - 12:00 a.m.
WordPress StripShow Plugin <= 2.5.2 - SQL Injection
2014-08-0600:00:00
Anant Shrivastava
patchstack.com
6
EPSS
0.001
Percentile
51.4%
Because of this vulnerability in the stripshow-storylines page, remote authenticated administrators can execute arbitrary SQL commands in an edit action to wp-admin/admin.php via the “story” parameter.
Solution
Update the plugin.
Related
cvelist
cvelist
CVE-2014-5184
2014-08-06 19:00:00
nvd
nvd
CVE-2014-5184
2014-08-06 19:55:04
wpvulndb
wpvulndb
stripShow 2.5.2 - SQL Injection
2014-09-24 07:57:07
prion
prion
Sql injection
2014-08-06 19:55:00
cve
cve
CVE-2014-5184
2014-08-06 19:55:04