CVE-2011-5286 Social Slider < 7.4.2 - SQL Injection
HighCVSS 7.5
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in social-slider-2/ajax.php in the Social Slider plugin before 7.4.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the rA array parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| social slider project social slider | <= 7.4.0 | No fix listed |
| wordpress social-slider(WordPress) | < 7.4.2 | 7.4.2 |
References
- www.htbridge.com exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org