SQL Injection Vulnerability in WPTouch Plugin for WordPress
CVE-2011-4803

Currently unrated

Key Information:

Vendor

Wordpress
Status
WPtouch
Vendor
CVE Published:
14 December 2011

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2011-4803?

The WPTouch plugin for WordPress contains an SQL injection vulnerability in the wptouch/ajax.php file that allows remote attackers to execute arbitrary SQL statements through the 'id' parameter. This flaw can potentially lead to unauthorized access to the database and exploitation of sensitive data, making it essential for site administrators to apply patches or workarounds to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2011-4803 - Proof of Concept

References

http://www.exploit-db.com/exploits/18039
exploitx_refsource_EXPLOIT-DB

Timeline

  • Vulnerability Reserved

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

JSON
.