CVE-2013-1852
HIGH
7.5
CVSS 2.0
Description
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
Affected WordPress components
-
leaguemanager Plugin · leaguemanagerVersions not specified; Version 3.6.5; Up to and including 3.8; Version 1.0; Version 1.1; Version 1.2; Version 1.2.1; Version 1.2.2; Version 1.3; Version 1.4; Version 1.4.1; Version 1.4.2; Version 1.5; Version 2.0; Version 2.1; Version 2.2; Version 2.3; Version 2.3.1; Version 2.4; Version 2.4.1; Version 2.5; Version 2.5.1; Version 2.5.2; Version 2.6; Version 2.6.1; Version 2.6.2; Version 2.6.3; Version 2.7; Version 2.7.1; Version 2.8; Version 2.9; Version 2.9.1; Version 2.9.2; Version 2.9.3; Version 3.0; Version 3.0.1; Version 3.0.2; Version 3.0.3; Version 3.0.4; Version 3.1; Version 3.1.1; Version 3.1.2; Version 3.1.3; Version 3.1.4; Version 3.1.5; Version 3.1.6; Version 3.1.7; Version 3.1.8; Version 3.1.9; Version 3.2; Version 3.2.1; Version 3.2.2; Version 3.3; Version 3.3.1; Version 3.4; Version 3.4.1; Version 3.4.2; Version 3.5; Version 3.5.1; Version 3.5.2; Version 3.5.3; Version 3.5.4; Version 3.5.5; Version 3.5.6; Version 3.6; Version 3.6.1; Version 3.6.2; Version 3.6.3; Version 3.6.4; Version 3.6.6; Version 3.6.7; Version 3.6.8; Version 3.6.9; Version 3.7View on WordPress.org
A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.
Affected products and versions
- n/a n/a — Versions not specified
- kolja_schleich leaguemanager — Up to and including 3.8
- kolja_schleich leaguemanager — Version 1.0
- kolja_schleich leaguemanager — Version 1.1
- kolja_schleich leaguemanager — Version 1.2
- kolja_schleich leaguemanager — Version 1.2.1
- kolja_schleich leaguemanager — Version 1.2.2
- kolja_schleich leaguemanager — Version 1.3
- kolja_schleich leaguemanager — Version 1.4
- kolja_schleich leaguemanager — Version 1.4.1
- kolja_schleich leaguemanager — Version 1.4.2
- kolja_schleich leaguemanager — Version 1.5
- kolja_schleich leaguemanager — Version 2.0
- kolja_schleich leaguemanager — Version 2.1
- kolja_schleich leaguemanager — Version 2.2
- kolja_schleich leaguemanager — Version 2.3
- kolja_schleich leaguemanager — Version 2.3.1
- kolja_schleich leaguemanager — Version 2.4
- kolja_schleich leaguemanager — Version 2.4.1
- kolja_schleich leaguemanager — Version 2.5
- kolja_schleich leaguemanager — Version 2.5.1
- kolja_schleich leaguemanager — Version 2.5.2
- kolja_schleich leaguemanager — Version 2.6
- kolja_schleich leaguemanager — Version 2.6.1
- kolja_schleich leaguemanager — Version 2.6.2
- kolja_schleich leaguemanager — Version 2.6.3
- kolja_schleich leaguemanager — Version 2.7
- kolja_schleich leaguemanager — Version 2.7.1
- kolja_schleich leaguemanager — Version 2.8
- kolja_schleich leaguemanager — Version 2.9
- kolja_schleich leaguemanager — Version 2.9.1
- kolja_schleich leaguemanager — Version 2.9.2
- kolja_schleich leaguemanager — Version 2.9.3
- kolja_schleich leaguemanager — Version 3.0
- kolja_schleich leaguemanager — Version 3.0.1
- kolja_schleich leaguemanager — Version 3.0.2
- kolja_schleich leaguemanager — Version 3.0.3
- kolja_schleich leaguemanager — Version 3.0.4
- kolja_schleich leaguemanager — Version 3.1
- kolja_schleich leaguemanager — Version 3.1.1
- kolja_schleich leaguemanager — Version 3.1.2
- kolja_schleich leaguemanager — Version 3.1.3
- kolja_schleich leaguemanager — Version 3.1.4
- kolja_schleich leaguemanager — Version 3.1.5
- kolja_schleich leaguemanager — Version 3.1.6
- kolja_schleich leaguemanager — Version 3.1.7
- kolja_schleich leaguemanager — Version 3.1.8
- kolja_schleich leaguemanager — Version 3.1.9
- kolja_schleich leaguemanager — Version 3.2
- kolja_schleich leaguemanager — Version 3.2.1
- kolja_schleich leaguemanager — Version 3.2.2
- kolja_schleich leaguemanager — Version 3.3
- kolja_schleich leaguemanager — Version 3.3.1
- kolja_schleich leaguemanager — Version 3.4
- kolja_schleich leaguemanager — Version 3.4.1
- kolja_schleich leaguemanager — Version 3.4.2
- kolja_schleich leaguemanager — Version 3.5
- kolja_schleich leaguemanager — Version 3.5.1
- kolja_schleich leaguemanager — Version 3.5.2
- kolja_schleich leaguemanager — Version 3.5.3
- kolja_schleich leaguemanager — Version 3.5.4
- kolja_schleich leaguemanager — Version 3.5.5
- kolja_schleich leaguemanager — Version 3.5.6
- kolja_schleich leaguemanager — Version 3.6
- kolja_schleich leaguemanager — Version 3.6.1
- kolja_schleich leaguemanager — Version 3.6.2
- kolja_schleich leaguemanager — Version 3.6.3
- kolja_schleich leaguemanager — Version 3.6.4
- kolja_schleich leaguemanager — Version 3.6.5
- kolja_schleich leaguemanager — Version 3.6.6
- kolja_schleich leaguemanager — Version 3.6.7
- kolja_schleich leaguemanager — Version 3.6.8
- kolja_schleich leaguemanager — Version 3.6.9
- kolja_schleich leaguemanager — Version 3.7
References
- osvdb.org http://osvdb.org/91442
- packetstormsecurity.com http://packetstormsecurity.com/files/120817/WordPress-LeagueManager-3.8-SQL-Injection.html Exploit
- wordpress.org http://wordpress.org/plugins/leaguemanager/changelog
- www.exploit-db.com http://www.exploit-db.com/exploits/24789 Exploit
- nvd.nist.gov Official NVD record