EUVD-2008-0517

Malware in sbrugna...

Sql injection

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0507

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-0507

Summary: CVE-2008-0507 is an SQL injection in the WordPress AdServe plugin (version 0.2) specifically in the adclick.php script, where user-supplied the parameter id is unsafely used in a database query. The vulnerability allows remote attackers to execute arbitrary SQL commands via id, potential...

CVE-2008-0507

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

Wordpress Plugin Adserve 0.2 adclick.php SQL Injection Exploit

No description provided by source. ? WordPress Adserve plugin v 0.2 Sql Injection Exploit Plugin Homepage-http://www.irisco.it/?pageid=40 Found by:enterthedragon Vuln code -In adclick.php if isset$GET'id' Header"Location: ".iriAdServeBannerClick$GET'id' -In iriAdServeBannerClick function return...

WordPress AdServe Plugin <= 0.2 - SQL Injection

Because of this vulnerability in adclick.php, the attackers can execute arbitrary SQL commands via the "id" parameter. Solution Update the plugin...

CVE-2008-0507: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in adclick.php in the AdServe 0.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

WordPress AdServe 'adclick.php' 'id' Parameter SQL Injection

The remote host is running AdServe, a third-party ad banner plugin for WordPress. The version of AdServe installed on the remote host fails to sanitize input to the 'id' parameter of the 'adclick.php' script before using it in a database query. Regardless of PHP's 'magicquotesgpc' setting, an...

WordPress Plugin Adserve 0.2 - 'adclick.php' SQL Injection

getvar"SELECT url FROM $tablename WHERE id=$id;"; Exploit id variable isnt filtered so we can inject and check the output in the Location response-header If exploit is succesfull Wordpress administrators login and md5 hashed password is retrieved echo "\n"; echo "-------WordPress Adserve plugin v...

Wordpress Plugin Adserve 0.2 adclick.php SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== Wordpress Plugin Adserve 0.2 adclick.php SQL Injection Exploit ============================================================== getvar"SELECT url FROM $tablename WHERE id=$id;";...

WordPress Plugin Adserve 0.2 - adclick.php SQL Injection

WordPress Plugin Adserve 0.2 - adclick.php SQL Injection getvar"SELECT url FROM $tablename WHERE id=$id;"; Exploit id variable isnt filtered so we can inject and check the output in the Location response-header If exploit is succesfull Wordpress administrators login and md5 hashed password is...