Sql injection

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 fromdate or 2 todate parameter to spy.php...

CVE-2008-0520

The CVE-2008-0520 entry describes SQL injection vulnerabilities in the WassUp WordPress plugin (versions 1.4–1.4.3), specifically in main.php where the spy.php script accepts from_date and to_date parameters. The affected component is the WassUp plugin for WordPress; the underlying issue allows r...

CVE-2008-0520

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 fromdate or 2 todate parameter to spy.php...

Wordpress Plugin WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit

No description provided by source. ? WordPress WassUp plugin v 1.4.3 Sql Injection Exploit Plugin Homepage-http://www.wpwp.org/ Found by:enterthedragon Tested successfully on v 1.4-1.4.3 lower versions are possibly vulnerable too just check the source and modify the query as needed Vuln code -In...

CVE-2008-0520: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in main.php in the WassUp plugin 1.4 through 1.4.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 fromdate or 2 todate parameter to spy.php...

WordPress WassUp Plugin <= 1.4.3 - Multiple SQL Injection

Because of these vulnerabilities in main.php, the attackers can execute arbitrary SQL commands. Solution Update the plugin...

Wordpress Plugin WassUp 1.4.3 (spy.php to_date) SQL Injection Exploit

Exploit for unknown platform in category web applications ===================================================================== Wordpress Plugin WassUp 1.4.3 spy.php todate SQL Injection Exploit ===================================================================== getresults"SELECT id, wassupid,...

WassUp 1.4.3 - (spy.php to_date) SQL Injection Exploit

The WassUp Real Time Analytics WordPress plugin was affected by a spy.php todate SQL Injection Exploit security vulnerability...

WordPress Plugin WassUp 1.4.3 - to_date SQL Injection

WordPress Plugin WassUp 1.4.3 - todate SQL Injection getresults"SELECT id, wassupid, maxtimestamp as maxtimestamp, ip, hostname, searchengine, urlrequested, agent, referrer, spider, username, commentauthor FROM $tablename WHERE timestamp BETWEEN $fromdate AND $todate GROUP BY id ORDER BY...

WordPress Plugin WassUp 1.4.3 - 'to_date' SQL Injection

getresults"SELECT id, wassupid, maxtimestamp as maxtimestamp, ip, hostname, searchengine, urlrequested, agent, referrer, spider, username, commentauthor FROM $tablename WHERE timestamp BETWEEN $fromdate AND $todate GROUP BY id ORDER BY maxtimestamp DESC"; Exploit $fromdate and $todate GET variabl...