CVE-2013-1852

The CVE-2013-1852 issue affects the WordPress LeagueManager plugin prior to version 3.8.1, where an SQL injection vulnerability exists in the league_id parameter used by the leaguemanager_export flow. An attacker can exploit this via the leaguemanager-export page (wp-admin/admin.php) to inject ar...

WordPress LeagueManager Plugin 3.8 - SQL Injection

LeagueManager plugin is prone to an SQL injection that exists in the "leagueid" parameter of a function call made by the leaguemanagerexport page. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit...