CVE-2013-3532
HIGH
7.5
CVSS 2.0
Description
SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter.
Affected products and versions
- n/a n/a — Versions not specified
References
- osvdb.org http://osvdb.org/92264
- packetstormsecurity.com http://packetstormsecurity.com/files/121250/WordPress-Spider-Video-Player-2.1-SQL-Injection.html Exploit
- packetstormsecurity.com http://packetstormsecurity.com/files/128851/WordPress-HTML5-Flash-Player-SQL-Injection.html Exploit
- www.securityfocus.com http://www.securityfocus.com/bid/59021 Exploit
- www.securityfocus.com http://www.securityfocus.com/bid/70763 Exploit
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/83374
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/98332
- nvd.nist.gov Official NVD record