PT-2012-3055

Name of the Vulnerable Software and Affected Versions WP-RecentComments plugin version 2.0.7 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in an rc-content action to "index.php". Recommendations For WP-RecentComments plugin...

CVE-2012-1067: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third part...