EUVD-2014-5098

Malware in sbrugna...

CVE-2014-5200

SQL injection vulnerability in gameplay.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in gameplay.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-5200

The CVE-2014-5200 entry concerns the FB Gorilla WordPress plugin, where game_play.php is vulnerable to SQL injection via the id parameter. The root cause is unsanitized user input, enabling remote attackers to execute arbitrary SQL commands. Impact identified in sources includes data modification...

CVE-2014-5200

SQL injection vulnerability in gameplay.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-5200: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gameplay.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2014-6339

Name of the Vulnerable Software and Affected Versions FB Gorilla plugin for WordPress affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the game play.php file. Recommendations For the FB Gorill...

WordPress FB Gorilla Plugin - SQL Injection

This WordPress FB Gorilla plugin's "gameplay.php" is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin FB Gorilla - 'game_play.php' SQL Injection

source: https://www.securityfocus.com/bid/69222/info FB Gorilla plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent...