CVE-2014-4938

SQL injection vulnerability in the WP Rss Poster wp-rss-poster plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in the wrp-add-new page to wp-admin/admin.php...

CVE-2014-4938

The CVE-2014-4938 entry concerns the WordPress WP RSS Poster plugin version 1.0.0. A SQL injection flaw exists in the wrp-add-new page (wp-admin/admin.php) exploitable via the id parameter, enabling remote attackers to execute arbitrary SQL commands. Documented impact includes typical web app con...

CVE-2014-4938

creationtimestamp| type| source ---|---|--- 2014-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39252...