4 matches found
Sql injection
Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 categoryid or 2 pdfid parameter to wp-admin/admin.php...
CVE-2014-4944
Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 categoryid or 2 pdfid parameter to wp-admin/admin.php...
PT-2014-6223
Name of the Vulnerable Software and Affected Versions BSK PDF Manager plugin version 1.3.2 Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the categoryid or pdfid parameter to the "wp-admin/admin.php" endpoint. Recommendations For BS...
CVE-2014-4944: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the 1 categoryid or 2 pdfid parameter to wp-admin/admin.php...