EUVD-2011-5207

Malware in sbrugna...

CVE-2011-5308

Multiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 cdnvotepostid or 2 cdnvotepoint parameter...

WordPress Plugin Cdnvote SQL Injection Vulnerability

WordPress is a use of PHP language development of blogging platform , users can support PHP and MySQL database server set up their own weblog . cdnvote is a WordPress plugin to create a voting module . WordPress plugin Cdnvote has a SQL injection vulnerability. A remote attacker can exploit this...

CVE-2011-5308

Multiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 cdnvotepostid or 2 cdnvotepoint parameter...

Sql injection

Multiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 cdnvotepostid or 2 cdnvotepoint parameter...

CVE-2011-5308

CVE-2011-5308 affects the WordPress plugin cdnvote where the vulnerable file is cdnvote-post.php . The root cause is multiple SQL injection flaws that allow remote attackers to manipulate the database via the parameters cdnvote_post_id or cdnvote_point , in plugin versions before 0.4.2. This coul...

WordPress CDNVOTE Plugin <= 0.4.1 - Multiple SQL Injection

Because of these vulnerabilities in cdnvote-post.php, the attackers can execute arbitrary SQL commands via the "cdnvotepoint" or "cdnvotepostid" parameter. Solution Update the plugin...

CDNVote 0.4.1 SQL Injection

Vulnerability ID: HTB22845 Reference: http://www.htbridge.ch/advisory/sqlinjectionincdnvotewordpressplugin.html Product: cdnvote wordpress plugin Vendor: Nakahira http://www.crossdrive.net/ Vulnerable Version: 0.4.1 Vendor Notification: 08 February 2011 Vulnerability Type: SQL Injection Risk leve...

HTB22845: SQL Injection in cdnvote wordpress plugin

Vulnerability ID: HTB22845 Reference: http://www.htbridge.ch/advisory/sqlinjectionincdnvotewordpressplugin.html Product: cdnvote wordpress plugi; Vendor: Nakahira http://www.crossdrive.net/ Vulnerable Version: 0.4.1 Vendor Notification: 08 February 2011 Vulnerability Type: SQL Injection Risk leve...

SQL Injection Vulnerability in cdnvote

High-Tech Bridge SA Security Research Lab has discovered vulnerability in cdnvote WordPress plugin which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in cdnvote The vulnerability exists due to input sanitation errors in the "cdnvotepoint" parameter in...

Cdnvote < 0.4.2 - Multiple SQL Injections

The cdnvote WordPress plugin was affected by a Multiple SQL Injections security vulnerability...