Description (CNA)
SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98332
- http://osvdb.org/92264
- http://packetstormsecurity.com/files/121250/WordPress-Spider-Video-Player-2.1-SQL-Injection.html
- http://www.securityfocus.com/bid/70763
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83374
- http://www.securityfocus.com/bid/59021
- http://packetstormsecurity.com/files/128851/WordPress-HTML5-Flash-Player-SQL-Injection.html
ADP enrichment
No English description supplied.
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98332
- http://osvdb.org/92264
- http://packetstormsecurity.com/files/121250/WordPress-Spider-Video-Player-2.1-SQL-Injection.html
- http://www.securityfocus.com/bid/70763
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83374
- http://www.securityfocus.com/bid/59021
- http://packetstormsecurity.com/files/128851/WordPress-HTML5-Flash-Player-SQL-Injection.html