CVE-2014-9173 Google Doc Embedder < 2.5.17 - SQL Injection
HighCVSS 7.5
EPSS 5.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress google-document-embedder(WordPress) | < 2.5.17 | 2.5.17 |
| google doc embedder project google doc embedder | <= 2.5.14 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- 115044 vdb-entry
- security.szurek.pl exploit
- 35371 exploit
- wp-googledocembedder-sql-injection(98944) vdb-entry
- plugins.trac.wordpress.org exploit