CVE-2012-5853

The CVE-2012-5853 entry concerns the WordPress plugin cardoza-ajax-search (the AJAX Post Search) prior to version 1.3. An SQL injection affects the function the_search_function in cardoza_ajax_search.php, exploitable via the srch_txt parameter in the the_search_text action to wp-admin/admin-ajax....