CVE-2011-5308 CDN Vote < 0.4.2 - SQL Injection
HighCVSS 7.5
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in cdnvote-post.php in the cdnvote plugin before 0.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) cdnvote_post_id or (2) cdnvote_point parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cdnvote project cdnvote | <= 0.4.1 | No fix listed |
| wordpress cdnvote(WordPress) | < 0.4.2 | 0.4.2 |
References
- wpsecure.net
- plugins.trac.wordpress.org
- www.htbridge.com exploit
- Wordfence Intelligence third-party-advisory
- www.cve.org