CVE-2011-5308

CVE-2011-5308 affects the WordPress plugin cdnvote where the vulnerable file is cdnvote-post.php . The root cause is multiple SQL injection flaws that allow remote attackers to manipulate the database via the parameters cdnvote_post_id or cdnvote_point , in plugin versions before 0.4.2. This coul...