CVE-2014-1854 in AdRotate
Summary
SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
02/02/2014
Disclosure
02/27/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 66469 | AdRotate sql injection | 89 | High | Not defined | CVE-2014-1854 |