WordPress CVEs

Description

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.

Affected WordPress components

• landing-pages Plugin · landing-pages
  Confirmed match Homeless
  Versions not specified
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a n/a — Versions not specified
• landing_pages_project landing_pages_plugin — Up to and including 1.2.3
• landing_pages_project landing_pages_plugin — Version 1.0.3.7
• landing_pages_project landing_pages_plugin — Version 1.0.3.8
• landing_pages_project landing_pages_plugin — Version 1.0.3.9
• landing_pages_project landing_pages_plugin — Version 1.0.4.1
• landing_pages_project landing_pages_plugin — Version 1.0.4.2
• landing_pages_project landing_pages_plugin — Version 1.0.4.4
• landing_pages_project landing_pages_plugin — Version 1.0.5.1
• landing_pages_project landing_pages_plugin — Version 1.0.5.3
• landing_pages_project landing_pages_plugin — Version 1.0.5.6
• landing_pages_project landing_pages_plugin — Version 1.0.7.1
• landing_pages_project landing_pages_plugin — Version 1.0.7.3
• landing_pages_project landing_pages_plugin — Version 1.0.7.9
• landing_pages_project landing_pages_plugin — Version 1.0.8.1
• landing_pages_project landing_pages_plugin — Version 1.0.8.4
• landing_pages_project landing_pages_plugin — Version 1.0.8.5
• landing_pages_project landing_pages_plugin — Version 1.0.8.6
• landing_pages_project landing_pages_plugin — Version 1.0.9.0
• landing_pages_project landing_pages_plugin — Version 1.0.9.3
• landing_pages_project landing_pages_plugin — Version 1.0.9.4
• landing_pages_project landing_pages_plugin — Version 1.0.9.9
• landing_pages_project landing_pages_plugin — Version 1.1
• landing_pages_project landing_pages_plugin — Version 1.1.0.1
• landing_pages_project landing_pages_plugin — Version 1.1.7
• landing_pages_project landing_pages_plugin — Version 1.1.8
• landing_pages_project landing_pages_plugin — Version 1.1.9
• landing_pages_project landing_pages_plugin — Version 1.2.1

References

• osvdb.org http://osvdb.org/98334
• plugins.trac.wordpress.org http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages Exploit, Patch
• secunia.com http://secunia.com/advisories/55192 Vendor Advisory
• wordpress.org http://wordpress.org/plugins/landing-pages/changelog
• www.securityfocus.com http://www.securityfocus.com/bid/62942
• exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/87803
• nvd.nist.gov Official NVD record