Sql injection

SQL injection vulnerability in BTERWwebajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter...

CVE-2009-2383

The CVE-2009-2383 entry concerns the WordPress Related Sites plugin (version 2.1) and its BTE_RW_webajax.php component, where a blind SQL injection vulnerability exists via the guid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, as the parameter is not pro...

CVE-2009-2383

SQL injection vulnerability in BTERWwebajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter...

WordPress Related Sites Plugin 2.1 - Blind SQL Injection Vulnerability

A critical blind SQL vulnerability has been discovered in the WordPress Plugin Related Sites plugin. User input is not being sanitized in BTERWwebajax.php file line 27, therefore the attacker can inject SQL via POST. Solution Update plugin...