7.5
CVSSv2

CVE-2011-4803

Published: 14/12/2011 Updated: 05/03/2012
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

bravenewcode wptouch 1.5

bravenewcode wptouch 1.7.5

bravenewcode wptouch 1.9.25

bravenewcode wptouch 1.9.22

bravenewcode wptouch 1.9.16

bravenewcode wptouch 1.9.8.1

bravenewcode wptouch 1.9.7.7

bravenewcode wptouch 1.9

bravenewcode wptouch 1.1

bravenewcode wptouch 1.9.13

bravenewcode wptouch 1.9.11

bravenewcode wptouch 1.9.9.5

bravenewcode wptouch 1.9.19.4

bravenewcode wptouch 1.3.5

bravenewcode wptouch 1.4

bravenewcode wptouch 1.9.17

bravenewcode wptouch 1.9.21.1

bravenewcode wptouch 1.9.9.2

bravenewcode wptouch 1.9.9.1

bravenewcode wptouch 1.9.9

bravenewcode wptouch 1.9.8.3

bravenewcode wptouch 1.9.19.3

bravenewcode wptouch 1.9.19

bravenewcode wptouch 1.9.19.1

bravenewcode wptouch 1.9.15

bravenewcode wptouch 1.9.18

bravenewcode wptouch 1.9.20

bravenewcode wptouch 1.9.23

bravenewcode wptouch 1.9.26

bravenewcode wptouch 1.9.21

bravenewcode wptouch 1.9.19.5

bravenewcode wptouch 1.9.7.6

bravenewcode wptouch 1.9.6

bravenewcode wptouch 1.9.5

bravenewcode wptouch 1.9.1

bravenewcode wptouch 1.9.9.8

bravenewcode wptouch 1.9.10

bravenewcode wptouch 1.9.9.6

bravenewcode wptouch 1.9.9.7

bravenewcode wptouch 1.6

bravenewcode wptouch 1.8.9.3

bravenewcode wptouch 1.9.24

bravenewcode wptouch 1.9.22.1

bravenewcode wptouch 1.2

bravenewcode wptouch 1.9.9.3

bravenewcode wptouch 1.9.8.2

bravenewcode wptouch 1.9.8

bravenewcode wptouch 1.8.9.1

bravenewcode wptouch 1.9.19.2

bravenewcode wptouch 1.9.14

bravenewcode wptouch 1.9.12

bravenewcode wptouch 1.9.9.4

bravenewcode wptouch 1.0

Exploits

# Exploit Title: WordPress wptouch plugin SQL Injection Vulnerability # Date: 2011-27-10 # Author: longrifle0x # software: Wordpress # Tools: SQLMAP --------------- (POST data) --------------- wwwsitecom/wp-content/plugins/wptouch/ajaxphp #Exploit: id=-1; id=- AND SLEEP(5) or 1=if sitecom/wp-content/plugins/wptouch/ajaxphp][GE ...