WordPress Mz-jajak plugin <= 2.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Mz-jajak plugin = 2.1 SQL Injection Vulnerability Date: 2012-08-10 Author: StRoNiX E-mail: [email protected] Software Link: http://downloads.wordpress.org/plugin/mz-jajak.zip Version: 2.1 tested --------------- PoC POST data...

Plugin for WordPress Mz-jajak <= 2.1 SQL injection and fix-vulnerability warning-the black bar safety net

Title: WordPress Mz-jajak plugin = 2.1 SQL Injection Vulnerability Author: StRoNiX [email protected] Download address: http://downloads.wordpress.org/plugin/mz-jajak.zip Affected version: 2.1 test --------------- Test certificate POST data --------------- POST /index. phpHTTP/1.1...

WordPress Mz-Jajak 2.1 SQL Injection

Exploit Title: WordPress Mz-jajak plugin query"UPDATE " . $tablename . " SET ".$answert."=".$answert."+1 WHERE id=".$id; $rows = $wpdb-getresults"SELECT FROM " . $tablename . " WHERE id=".$id; Greetz: T0r3x, m1l05, JuMp-Er, EsC, UNICORN, Xermes, s4r4d0...

WordPress Plugin Mz-jajak 2.1 - SQL Injection

WordPress Plugin Mz-jajak 2.1 - SQL Injection Exploit Title: WordPress Mz-jajak plugin query"UPDATE " . $tablename . " SET ".$answert."=".$answert."+1 WHERE id=".$id; $rows = $wpdb-getresults"SELECT FROM " . $tablename . " WHERE id=".$id; Greetz: T0r3x, m1l05, JuMp-Er, EsC, UNICORN, Xermes, s4r4d...

WordPress Mz-jajak Plugin <= 2.1 - SQL Injection

This WordPress Mz-jajak plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin Mz-jajak 2.1 - SQL Injection

Exploit Title: WordPress Mz-jajak plugin query"UPDATE " . $tablename . " SET ".$answert."=".$answert."+1 WHERE id=".$id; $rows = $wpdb-getresults"SELECT FROM " . $tablename . " WHERE id=".$id; Greetz: T0r3x, m1l05, JuMp-Er, EsC, UNICORN, Xermes, s4r4d0...