12 matches found
EUVD-2001-1205
Malware in sbrugna...
CVE-2014-1854
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter...
Sql injection
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter...
CVE-2014-1854
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter...
CVE-2014-1854
CVE-2014-1854 affects WordPress AdRotate plugins (library/clicktracker.php) where the track parameter is unsafely handled, enabling SQL injection and remote execution of arbitrary SQL. Exploitation was demonstrated against AdRotate 3.9.4 (and likely earlier) with a crafted HTTP GET request; High ...
PT-2014-4329
Name of the Vulnerable Software and Affected Versions AdRotate Pro plugin versions 3.9 through 3.9.5 AdRotate Free plugin versions 3.9 through 3.9.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the track parameter in the...
CVE-2014-1854: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter...
CVE-2001-1224
getinput in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack...
CVE-2001-1224
The CVE-2001-1224 entry concerns Les VanBrunt AdRotate Pro 2.0. The vulnerability is in get_input within adrotate.pm, allowing remote attackers to modify the database and potentially execute arbitrary commands via a SQL injection attack. This constitutes a client/server impact on data integrity a...
CVE-2001-1224: Undefined Security Weakness
getinput in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote attackers to modify the database and possibly execute arbitrary commands via a SQL code injection attack...
GOBBLES CGI MARATHON #001
PRODUCT AdRotate Pro http://www.vanbrunt.com/adrotate/ This is used by a lot of sites out there in the wild. DESCRIPTION AdRotate is ad rotating software written in Perl language, which uses DBI with mysql driver to access database. Included with software is module adrotate.pm which contains...