CVE-2014-2839 in GD Star Ratinginfo

Summary

SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter in the gd-star-rating-stats page to wp-admin/admin.php.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

04/10/2014

Disclosure

01/12/2015

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

Sources

Interested in the pricing of exploits?

See the underground prices here!