CVE-2014-5189
HIGH
7.5
CVSS 2.0
Description
SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products and versions
- n/a n/a — Versions not specified
- leadoctopus lead_octopus — Versions not specified
References
- osvdb.org http://osvdb.org/show/osvdb/109642
- packetstormsecurity.com http://packetstormsecurity.com/files/127640/WordPress-Lead-Octopus-Power-SQL-Injection.html Exploit
- www.securityfocus.com http://www.securityfocus.com/bid/68934 Exploit
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/94912
- nvd.nist.gov Official NVD record