WordPress CP Multi View Event Calendar 1.01 SQL Injection Vulnerability

WordPress CP Multi View Event Calendar plugin version 1.01 suffers from a remote SQL injection vulnerability. Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link :...

WordPress CP Multi View Event Calendar 1.01 SQL Injection

Exploit Title : CP Multi View Event Calendar 1.01 SQL Injection Vulnerability Exploit Author : Claudio Viviani Software Link : https://downloads.wordpress.org/plugin/cp-multi-view-calendar.zip Date : 2014-10-23 Tested on : Windows 7 / Mozilla Firefox Windows 7 / sqlmap 0.8-1 Linux / Mozilla...

PT-2014-8633

Name of the Vulnerable Software and Affected Versions CP Multi View Event Calendar plugin version 1.01 for WordPress Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the calid parameter. Recommendations For CP Multi View Event Calendar plugin...