AdRotate Banner Manager <= 5.2 - Authenticated SQL Injection

The vendor states: “Earlier this week I was contacted by a security research firm who has apparently been poking around in the code of AdRotate and they found an issue in AdRotate Free. Upon checking the code following their advisory I found a potential weak point in AdRotate Pro as well. Though the proof of concept “hack” didn’t work on AdRotate Pro. A few small tweaks made sense to prevent a crafty scammer to even get close. A number of database queries have been updated to be more secure and more uniform (so the code looks prettier). Without admin access your data is not at risk and there is no evidence that this vulnerability actually works or has been exploited anywhere.”