WordPress Plugin AdRotate SQL Injection (CVE-2014-1854)

An SQL injection vulnerability has been reported in the AdRotate plugin for WordPress. Remote attacker can exploit this vulnerability to execute arbitrary SQL commands on the target...

AdRotate library/clicktracker.php track Parameter SQL Injection

AdRotate contains a flaw that may allow carrying out an SQL injection attack.The issue is due to the library/clicktracker.php script not properly sanitizing user-supplied input to the 'track' parameter. This may allow a remote attacker to inject or manipulate SQL queries in the back-end database,...

CVE-2014-1854

SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter...

Sql injection

SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter...

CVE-2014-1854

SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter...

CVE-2014-1854

CVE-2014-1854 affects WordPress AdRotate plugins (library/clicktracker.php) where the track parameter is unsafely handled, enabling SQL injection and remote execution of arbitrary SQL. Exploitation was demonstrated against AdRotate 3.9.4 (and likely earlier) with a crafted HTTP GET request; High ...

WordPress AdRotate插件'clicktracker.php'SQL注入漏洞

BUGTRAQ ID: 65709 CVECAN ID: CVE-2014-1854 AdRotate是网站广告管理插件。 AdRotate 3.9.4及其他版本没有有效验证"/wp-content/plugins/adrotate/library/clicktracker.php"脚本的"track" HTTP GET参数值，未经身份验证的远程攻击者可利用此漏洞在应用的数据库内执行任意SQL命令。 0 WordPress AdRotate 3.9.4 厂商补丁： WordPress --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

WordPress Plugin AdRotate 3.9.4 - 'clicktracker.ph?track' SQL Injection

Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30, 2014 Vendor Patch: January 31, 2014 Public Disclosure: February 20,...

WordPress AdRotate Plugin 3.9.4 - SQL Injection

This WordPress AdRotate plugin's clicktracker.php "track param" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin to 3.9.5...

WordPress Plugin AdRotate 3.9.4 - clicktracker.ph?track SQL Injection

WordPress Plugin AdRotate 3.9.4 - clicktracker.ph?track SQL Injection Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30...

AdRotate 3.9.4 SQL Injection

Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30, 2014 Vendor Patch: January 31, 2014 Public Disclosure: February 20,...

SQL Injection in AdRotate

High-Tech Bridge Security Research Lab discovered vulnerability in AdRotate, which can be exploited to perform SQL Injection attacks. 1 SQL Injection in AdRotate: CVE-2014-1854 The vulnerability exists due to insufficient validation of "track" HTTP GET parameter passed to...

AdRotate v3.7.3.5 Wordpress - Multiple Web Vulnerabilities

Document Title: =============== AdRotate v3.7.3.5 Wordpress - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=690 Release Date: ============= 2012-08-20 Vulnerability Laboratory ID VL-ID: ====================================...

AdRotate v3.7.3.5 Wordpress - Multiple Web Vulnerabilities

Document Title: =============== AdRotate v3.7.3.5 Wordpress - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=690 Release Date: ============= 2012-08-20 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2011-4671

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter aka redirect URL...

Sql injection

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter aka redirect URL...

CVE-2011-4671

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter aka redirect URL...

CVE-2011-4671

CVE-2011-4671 affects the WordPress AdRotate plugin, specifically the file adrotate-out.php. The SQL injection vulnerability exists in version 3.6.6 and earlier than 3.6.8, allowing remote attackers to execute arbitrary SQL commands through the track parameter (redirect URL). Connected sources co...

WordPress AdRotate plugin <= 3.6.6 SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress AdRotate plugin = 3.6.6 SQL Injection Vulnerability Date: 2011-11-8 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/adrotate.3.6.6.zip Version: 3.6.6 tested Note:...

WordPress AdRotate 3.6.6 SQL Injection

Exploit Title: WordPress AdRotate plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" encoded=echo -n "1' AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" | base64 -w 0 curl http://www.site.com/wp-content/plugins/adrotate/adrotate-out.php?track=$encoded --------------- Vulnerab...