CVE-2011-4671

HIGH 7.5 CVSS 2.0

Published: December 2, 2011
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-89
CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL).

Affected products and versions

n/a n/a — Versions not specified

References

downloads.wordpress.org http://downloads.wordpress.org/plugin/adrotate.3.6.8.zip Patch
secunia.com http://secunia.com/advisories/46814
unconciousmind.blogspot.com http://unconciousmind.blogspot.com/2011/11/wordpress-adrotate-plugin-366-sql.html Exploit
www.exploit-db.com http://www.exploit-db.com/exploits/18114 Exploit
www.securityfocus.com http://www.securityfocus.com/bid/50674
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References