Sql injection

SQL injection vulnerability in gameplay.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2014-5200

The CVE-2014-5200 entry concerns the FB Gorilla WordPress plugin, where game_play.php is vulnerable to SQL injection via the id parameter. The root cause is unsanitized user input, enabling remote attackers to execute arbitrary SQL commands. Impact identified in sources includes data modification...

WordPress Plugin FB Gorilla - 'game_play.php' SQL Injection

source: https://www.securityfocus.com/bid/69222/info FB Gorilla plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent...