WordPress Simple Ads Manager Plugin <= 2.9.4.116 - SQL Injection - Patchstack

Vulnerability Database

WordPress Simple Ads Manager Plugin <= 2.9.4.116 - SQL Injection

simple-ads-manager

Software

Simple Ads Manager

Versions

<= 2.9.4.116

Disclosure date

2016-01-30

CVE

CVE-N/A

References

Packet Storm Security

Credits

Kacper Szurek

Classification

SQL Injection

OWASP Top 10

A1: Injection

Are your websites subject to this vulnerability?

Details

This plugin is prone to an SQL injection vulnerability, because $whereClause and $whereClauseT and $whereClauseW and $whereClause2W are not escaped.

Solution

Upgrade the plugin.

Found a vulnerability that puts your sites at risk?

Found a vulnerability? Help us secure the web and join our community of ethical hackers.

Are you the developer of this software? Hire our researchers for a thorough security audit.