CVE-2013-6243

Description

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/87803

https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-6071

http://www.securityfocus.com/bid/62942

http://wordpress.org/plugins/landing-pages/changelog

http://secunia.com/advisories/55192

http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages

http://osvdb.org/98334

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS