Sql injection

The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter...

CVE-2016-10950

The sirv plugin before 1.3.2 for WordPress has SQL injection via the id parameter...

CVE-2016-10950

The CVE-2016-10950 entry concerns the WordPress Sirv plugin prior to 1.3.2, vulnerable to SQL injection via the id parameter. Public sources (including Red Hat and CNVD entries / CVE records) confirm the issue stems from unsanitized input used in SQL queries, notably in functions like sirv_get_ro...

Wordpress Sirv plugin SQL injection vulnerability

WordPress is the WordPress Software Foundation of a set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . A SQL injection vulnerability exists in the rowid parameter of the admin-ajax.php page of Wordpress plugin Sirv...

Wordpress Sirv 1.3.1 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sirv 1.3.1 Plugin For WordPress Sql Injection Date: 10/11/2016 Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/sirv/ Software Link: https://wordpress.org/plugins/sirv/ Contact:...

WordPress Sirv Plugin <= 1.3.1 - Authenticated SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...