Lucene search
PRIOn knowledge basePRION:CVE-2015-2199HistoryMar 03, 2015 - 7:59 p.m.
Sql injection
2015-03-0319:59:00
PRIOn knowledge base
www.prio-n.com
2
Multiple SQL injection vulnerabilities in the WonderPlugin Audio Player plugin before 2.1 for WordPress allow (1) remote authenticated users to execute arbitrary SQL commands via the item[id] parameter in a wonderplugin_audio_save_item action to wp-admin/admin-ajax.php or remote administrators to execute arbitrary SQL commands via the itemid parameter in the (2) wonderplugin_audio_show_item, (3) wonderplugin_audio_show_items, or (4) wonderplugin_audio_edit_item page to wp-admin/admin.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| audio_player | le | 2.0 |
Related
nvd
nvd
CVE-2015-2199
2015-03-03 19:59:05
patchstack
patchstack
WordPress Audio Player Plugin <= 2.0 - Multiple SQL Injection
2015-03-03 00:00:00
cve
cve
CVE-2015-2199
2022-10-03 16:16:09
cvelist
cvelist
CVE-2015-2199
2022-10-03 16:16:09
wpvulndb
wpvulndb
WonderPlugin Audio Player 2.0 - Blind SQL Injection & XSS
2015-02-19 00:00:00
kaspersky
kaspersky
KLA10491 Multiple vulnerabilities in WordPress plugins
2015-03-17 00:00:00