CVE-2011-5216 SCORM Cloud For WordPress < 1.0.7 - SQL Injection
HighCVSS 7.5
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the active parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| troyef scorm cloud | <= 1.0.6.6 | No fix listed |
| troyef scorm cloud | = 1.0 | No fix listed |
| troyef scorm cloud | = 1.0.1 | No fix listed |
| troyef scorm cloud | = 1.0.2 | No fix listed |
| troyef scorm cloud | = 1.0.3 | No fix listed |
| troyef scorm cloud | = 1.0.4 | No fix listed |
| troyef scorm cloud | = 1.0.5 | No fix listed |
| troyef scorm cloud | = 1.0.6 | No fix listed |
| troyef scorm cloud | = 1.0.6.1 | No fix listed |
| troyef scorm cloud | = 1.0.6.2 | No fix listed |
| troyef scorm cloud | = 1.0.6.3 | No fix listed |
| troyef scorm cloud | = 1.0.6.4 | No fix listed |
| troyef scorm cloud | = 1.0.6.5 | No fix listed |
| WordPress | All versions | No fix listed |
| wordpress scormcloud(WordPress) | < 1.0.7 | 1.0.7 |
References
- plugins.trac.wordpress.org exploit
- 47198 third-party-advisory vendor-advisory
- wordpress.org
- 77679 vdb-entry
- scormcloud-ajax-sql-injection(71788) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org