AdRotate < 5.8.4 - Authenticated SQL Injection

Authenticated SQL injection in the AdRotate 5.8.3.1 exists via param "id". However, this requires an admin privileged user. NOTE: The plugin author mistook this SQLi bug for XSS but the remedy remains OK. PoC Param "id" is vulneable to SQL Injeciton. Example 1:...

AdRotate < 5.8.4 - Authenticated SQL Injection

Authenticated SQL injection in the AdRotate 5.8.3.1 exists via param "id". However, this requires an admin privileged user. NOTE: The plugin author mistook this SQLi bug for XSS but the remedy remains OK. Param "id" is vulneable to SQL Injeciton. Example 1:...

WordPress AdRotate plugin <= 5.8.3 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Nguyen Anh Tien in WordPress AdRotate plugin versions = 5.8.3. Solution Update the WordPress AdRotate plugin to the latest available version at least 5.8.4...

WordPress AdRotate Banner Manager plugin <= 5.2 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability found by Tin Duong in WordPress AdRotate Banner Manager plugin versions = 5.2. Solution Update the WordPress AdRotate Banner Manager plugin to the latest available version at least 5.3...

WordPress AJdG AdRotate Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.AJdG AdRotate plugin is an ad management plugin used in it. A SQL injection vulnerability exists in WordPress AJdG AdRotate plugin...

CVE-2019-13570

The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection...

CVE-2019-13570

The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection...

Sql injection

The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection...

CVE-2019-13570

The CVE-2019-13570 entry applies to the WordPress AdRotate Banner Manager Plugin (AJdG AdRotate) prior to version 5.3. Multiple connected sources confirm a SQL Injection vulnerability caused by insufficient input validation in the plugin’s database queries, enabling a remote attacker to manipulat...

CVE-2019-13570

The AJdG AdRotate plugin before 5.3 for WordPress allows SQL Injection...

AdRotate Banner Manager <= 5.2 - Authenticated SQL Injection

The vendor states: "Earlier this week I was contacted by a security research firm who has apparently been poking around in the code of AdRotate and they found an issue in AdRotate Free. Upon checking the code following their advisory I found a potential weak point in AdRotate Pro as well. Though...

AdRotate <= 3.6.6 - SQL Injection

The AdRotate – Ad manager & AdSense Ads WordPress plugin was affected by a SQL Injection security vulnerability...

AdRotate <= 3.6.5 - SQL Injection

The AdRotate – Ad manager & AdSense Ads WordPress plugin was affected by a SQL Injection security vulnerability...

AdRotate <= 3.9.4 - clicktracker.php track Parameter SQL Injection

The AdRotate – Ad manager & AdSense Ads WordPress plugin was affected by a clicktracker.php track Parameter SQL Injection security vulnerability...

WordPress AdRotate plugin <= 3.6.5 - SQL Injection

No description provided by source. Exploit Title: WordPress AdRotate plugin = 3.6.5 SQL Injection Vulnerability Date: 2011-09-22 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/adrotate.3.6.5.zip Version: 3.6.5 tested Note:...

WordPress AdRotate plugin <= 3.6.6 - SQL Injection

No description provided by source. Exploit Title: WordPress AdRotate plugin = 3.6.6 SQL Injection Vulnerability Date: 2011-11-8 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/adrotate.3.6.6.zip Version: 3.6.6 tested Note:...

Wordpress AdRotate Plugin 3.9.4 - (clicktracker.php, track param) - SQL Injection

No description provided by source...

SQL Injection in AdRotate

Advisory ID: HTB23201 Product: AdRotate Vendor: AJdG Solutions Vulnerable Versions: 3.9.4 and probably prior Tested Version: 3.9.4 Advisory Publication: January 30, 2014 without technical details Vendor Notification: January 30, 2014 Vendor Patch: January 31, 2014 Public Disclosure: February 20,...

WordPress 插件AdRotate 3.9.4 /wp-content/plugins/adrotate/library/clicktracker.php SQL注入漏洞

No description provided by source...

WordPress AdRotate Plugin 'clicktracker.php' SQL Injection Vulnerability

WordPress AdRotate Plugin is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...