CVE-2014-5082

Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the 1 siteid or 2 url parameter...

Sql injection

Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the 1 siteid or 2 url parameter...

CVE-2014-5082

CVE-2014-5082 relates to multiple SQL injection vulnerabilities in admin/admin.php affecting Sphider 1.3.6 and earlier , including Sphider Pro/Plus . The flaw enables remote attackers to manipulate the underlying database by injecting via the parameters site_id or url , as documented in the CVE e...

CVE-2014-5184: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the stripshow-storylines page in the stripShow plugin 2.5.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the story parameter in an edit action to wp-admin/admin.php...

CVE-2014-5082: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/admin.php in Sphider 1.3.6 and earlier, Sphider Pro, and Sphider-plus allow remote attackers to execute arbitrary SQL commands via the 1 siteid or 2 url parameter...

CVE-2014-5183: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus simple-retail-menus plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php...

PT-2014-6323

Name of the Vulnerable Software and Affected Versions stripShow plugin version 2.5.2 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved by exploiting the story parameter in an edit action to the "wp-admin/admin.php" endpoint...

CVE-2014-5186: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the All Video Gallery all-video-gallery plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogalleryvideos page to wp-admin/admin.php...

PT-2014-6322

Name of the Vulnerable Software and Affected Versions Simple Retail Menus plugin versions prior to 4.1 Description The issue allows remote authenticated editors to execute arbitrary SQL commands. This is achieved by exploiting the targetmenu parameter in an edit action to the "wp-admin/admin.php"...

PT-2014-6270

Name of the Vulnerable Software and Affected Versions Sphider versions 1.3.6 and earlier Sphider Pro affected versions not specified Sphider-plus affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the site id or ur...

PT-2014-6325

Name of the Vulnerable Software and Affected Versions All Video Gallery plugin version 1.2 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the id parameter in an edit action in the "allvideogallery videos" page to...

CVE-2014-5180: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the videos page in the HDW Player Plugin hdw-player-video-player-video-gallery 2.4.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in the edit action to wp-admin/admin.php...

PT-2014-6319

Name of the Vulnerable Software and Affected Versions HDW Player Plugin hdw-player-video-player-video-gallery version 2.4.2 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the id parameter in the edit action to...

blogVault 1.05 - admin.php blogVault Key Setting CSRF

The Backup & Staging – BlogVault Backups WordPress plugin was affected by an admin.php blogVault Key Setting CSRF security vulnerability...

Cart66 Lite - admin.php cart66-products Page Multiple Field Stored XSS

The cart66-lite WordPress plugin was affected by an admin.php cart66-products Page Multiple Field Stored XSS security vulnerability...

WordPress 2.0 - 2.7.1 admin.php Module Configuration Security Bypass

...

WordPress blogVault Plugin <= 1.05 - Cross Site Request Forgery

This plugin is prone to a admin.php blogVault key setting cross site request forgery vulnerability. Solution Update the plugin...

WordPress BSK PDF Manager Plugin <= 1.3 - Cross Site Scripting

This plugin is prone to a cross site scripting in wp-admin/admin.php multiple parameter. Solution Upgrade the plugin...

WordPress Artiss Code Embed Plugin <= 2.0.1 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in wp-admin/admin.php suffix parameter. Solution Update the plugin...

Sql injection

Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 categoryid or 2 pdfid parameter to wp-admin/admin.php...