CVE-2014-3961

Currently unrated

Key Information:

Vendor
Wordpress
Status
Participants Database
Vendor
CVE Published:
4 June 2014

Summary

SQL injection vulnerability in the Export CSV page in the Participants Database plugin before 1.5.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the query parameter in an "output CSV" action to pdb-signup/.

References

http://packetstormsecurity.com/files/126878/WordPress-Par...
x_refsource_MISC
https://www.yarubo.com/advisories/1
x_refsource_MISC
http://www.exploit-db.com/exploits/33613
exploitx_refsource_EXPLOIT-DB

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.