CVE-2017-14507: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 timeline parameter in contenttimelineclass.php; or the id parameter to 2 pages/contenttimelineedit.php or 3 pages/contenttimelineindex.php...

PT-2017-13493

Name of the Vulnerable Software and Affected Versions Content Timeline plugin version 4.4.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the timeline parameter in the "content timeline class.php" file, or the id parameter to the...