WordPress CVEs

Description

SQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the active parameter. NOTE: some of these details are obtained from third party information.

Affected WordPress components

• WordPress core
  Confirmed match
  Versions not specified
• scormcloud Plugin · scormcloud
  Confirmed match Homeless
  Versions not specified
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• wordpress wordpress — Versions not specified

References

• plugins.trac.wordpress.org http://plugins.trac.wordpress.org/changeset/435356/scormcloud Exploit
• secunia.com http://secunia.com/advisories/47198 Vendor Advisory
• wordpress.org http://wordpress.org/extend/plugins/scormcloud/changelog/
• www.osvdb.org http://www.osvdb.org/77679
• exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/71788
• nvd.nist.gov Official NVD record