Wordpress Plugin WordPress Survey and Poll SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.WordPress Survey and Poll is one of the survey and poll plugin. A SQL injection vulnerability exists in the...

Sql injection

SQL injection vulnerability in the ajaxsurvey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the surveyid parameter in an ajaxsurvey action to wp-admin/admin-ajax.php...

PT-2015-5597

Name of the Vulnerable Software and Affected Versions WordPress Survey and Poll plugin version 1.1.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the survey id parameter in an ajax survey action to the "/wp-admin/admin-ajax.php" A...