CVE-2014-5200

The CVE-2014-5200 entry concerns the FB Gorilla WordPress plugin, where game_play.php is vulnerable to SQL injection via the id parameter. The root cause is unsanitized user input, enabling remote attackers to execute arbitrary SQL commands. Impact identified in sources includes data modification...