CVE-2012-2109 in BuddyPress plugin

Sumário (Inglês)

SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activity_widget_filter action.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservar

04/04/2012

Divulgação

04/09/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
62009	BuddyPress BuddyPress plugin wp-load.php Injeção SQL	89	Prova de conceito	Correção oficial	CVE-2012-2109

Fontes

• MITRE
• NVD
• CVE Details