CVE-2014-1854: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter...

PT-2014-4329

Name of the Vulnerable Software and Affected Versions AdRotate Pro plugin versions 3.9 through 3.9.5 AdRotate Free plugin versions 3.9 through 3.9.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the track parameter in the...