EUVD-2008-0852

Malware in sbrugna...

Sql injection

SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...

CVE-2008-0845

SQL injection vulnerability in wp-people-popup.php in Dean Logan WP-People plugin 1.6.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the person parameter...

CVE-2008-0845

The CVE-2008-0845 entry concerns the WordPress WP-People plugin (version 1.6.1) vulnerability in wp-people-popup.php where the person parameter enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. The underlying issue is improper handling of user input in the wp-peo...