SQL Injection Vulnerability in Jetpack Plugin by WordPress
CVE-2011-4673

Currently unrated

Key Information:

Vendor
Wordpress
Status
Jetpack
Vendor
CVE Published:
2 December 2011

Summary

The Jetpack plugin for WordPress contains an SQL injection vulnerability in the modules/sharedaddy.php file. This flaw permits remote attackers to craft specific requests, allowing them to execute arbitrary SQL queries through the 'id' parameter. Successful exploitation can lead to unauthorized access to sensitive data and manipulation of the database, compromising the integrity and confidentiality of the affected website.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/71404
vdb-entryx_refsource_XF
http://www.exploit-db.com/exploits/18126
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/bid/50730
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.