7.5
CVSSv2

CVE-2014-5200

Published: 12/08/2014 Updated: 08/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

fb gorilla project fb gorilla -

Exploits

source: wwwsecurityfocuscom/bid/69222/info FB Gorilla plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database http:/ ...