CVE-2014-1854

CVE-2014-1854 affects WordPress AdRotate plugins (library/clicktracker.php) where the track parameter is unsafely handled, enabling SQL injection and remote execution of arbitrary SQL. Exploitation was demonstrated against AdRotate 3.9.4 (and likely earlier) with a crafted HTTP GET request; High ...

CVE-2011-4671

CVE-2011-4671 affects the WordPress AdRotate plugin, specifically the file adrotate-out.php. The SQL injection vulnerability exists in version 3.6.6 and earlier than 3.6.8, allowing remote attackers to execute arbitrary SQL commands through the track parameter (redirect URL). Connected sources co...