CVE-2014-8586
HIGH
7.5
CVSS 2.0
Description
SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.
Affected products and versions
- n/a n/a — Versions not specified
References
- osvdb.org http://osvdb.org/show/osvdb/113670
- packetstormsecurity.com http://packetstormsecurity.com/files/128814/WordPress-CP-Multi-View-Event-Calendar-1.01-SQL-Injection.html Exploit
- www.exploit-db.com http://www.exploit-db.com/exploits/35073 Exploit
- www.securityfocus.com http://www.securityfocus.com/bid/70718
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/97766
- nvd.nist.gov Official NVD record