CVE-2011-5224
HIGH
7.5
CVSS 2.0
Description
SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products and versions
- n/a n/a — Versions not specified
References
- osvdb.org http://osvdb.org/77779
- plugins.trac.wordpress.org http://plugins.trac.wordpress.org/changeset?reponame=&new=475315%40wordpress-sentinel&old=474998%40wordpress-sentinel
- wordpress.org http://wordpress.org/extend/plugins/wordpress-sentinel/changelog/ Patch
- www.boiteaweb.fr http://www.boiteaweb.fr/wordpress-sentinel-v1-0-0-3104.html
- www.securityfocus.com http://www.securityfocus.com/bid/51089
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/71858
- nvd.nist.gov Official NVD record