CVE-2014-5200
HIGH
7.5
CVSS 2.0
Description
SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected products and versions
- n/a n/a — Versions not specified
- fb_gorilla_project fb_gorilla — Versions not specified
References
- packetstormsecurity.com http://packetstormsecurity.com/files/127639 Exploit
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/94916
- nvd.nist.gov Official NVD record