PT-2013-3858

Name of the Vulnerable Software and Affected Versions Leed Light Feed versions prior to 1.5 Stable Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in a "removeFolder" action in the "action.php" file. Recommendations For versio...

CVE-2013-2627: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in action.php in Leed Light Feed, possibly before 1.5 Stable, allows remote attackers to execute arbitrary SQL commands via the id parameter in a removeFolder action...

CVE-2013-2628: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in action.php in Leed Light Feed, possibly before 1.5 Stable, allow remote attackers to hijack the authentication of administrators for unspecified requests, related to the lack of an anti-CSRF token...

Leed - id SQL Injection

Leed - id SQL Injection source: https://www.securityfocus.com/bid/64426/info Leed is prone to an SQL-injection vulnerability. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...

Leed - 'id' SQL Injection

source: https://www.securityfocus.com/bid/64426/info Leed is prone to an SQL-injection vulnerability. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...