PT-2017-14657

Name of the Vulnerable Software and Affected Versions InLinks plugin versions through 1.1 for WordPress Description The issue allows authenticated users to execute arbitrary SQL commands. This is achieved via the "keyword" parameter to the "/wp-admin/options-general.php?page=inlinks/inlinks.php"...

WordPress In Link 1.0 SQL Injection Vulnerability

WordPress In Link plugin version 1.0 suffers from a remote SQL injection vulnerability. Vulnerability Type: SQL injection is POST parameter "keyword" Affected plugin: --------------------------------------- In Link Version: 1.0 Requires WordPress Version: 2.8 or higher Compatible up to: 2.8 URL:...