CVE-2013-3532

CVE-2013-3532 describes an SQL injection in the Web Dorado Spider Video Player (SpiderVPlayer) WordPress plugin, version 2.1, exposed via the settings.php theme parameter. The root cause is unparameterized SQL handling, permitting remote attackers to execute arbitrary SQL commands. Impact per sou...