CVE-2013-3532 SpiderVPlayer <= 2.1 - SQL Injection
HighCVSS 7.5
EPSS 5.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webdorado spider video player | = 2.1 | No fix listed |
| wordpress player(WordPress) | <= 2.1 | No fix listed |
References
- 92264 vdb-entry
- packetstormsecurity.com exploit
- packetstormsecurity.com exploit
- 59021 exploit vdb-entry
- 70763 exploit vdb-entry
- spidervideoplayer-settings-sql-injection(83374) vdb-entry
- wp-videoplayer-settings-sql-injection(98332) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org