CVE-2014-10013: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Another WordPress Classifieds Plugin plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the keywordphrase parameter in a dosearch action...

PT-2015-3657 · WordPress · Wordpress Classifieds Plugin

Name of the Vulnerable Software and Affected Versions: Another WordPress Classifieds Plugin affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via the keywordphrase parameter in a "dosearch" action. This enables attackers to manipulate...