adrotate pro vulnerabilities and exploits

(subscribe to this query)

get_input in adrotate.pm for Les VanBrunt AdRotate Pro 2.0 allows remote malicious users to modify the database and possibly execute arbitrary commands via a SQL code injection attack.

Les Vanbrunt Adrotate Pro 2.0

SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 up to and including 3.9.5 and AdRotate Free plugin 3.9 up to and including 3.9.4 for WordPress allows remote malicious users to execute arbitrary SQL commands via the track parameter.

Adrotateplugin Adrotate 3.9.Adrotateplugin Adrotate 3.9.1 Adrotateplugin Adrotate 3.9.2 Adrotateplugin Adrotate 3.9.3 Adrotateplugin Adrotate 3.9.4 Adrotateplugin Adrotate 3.9.5

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook