WordPress Video Player Plugin 'settings.php' SQL Injection Vulnerability
BID:70763
Info
WordPress Video Player Plugin 'settings.php' SQL Injection Vulnerability
| Bugtraq ID: | 70763 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-3532 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 25 2014 12:00AM |
| Updated: | Apr 13 2015 09:01PM |
| Credit: | Hugo Santiago dos Santos |
| Vulnerable: |
WordPress Video Player 0 |
| Not Vulnerable: | |
Discussion
WordPress Video Player Plugin 'settings.php' SQL Injection Vulnerability
The Video Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
The Video Player plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
WordPress Video Player Plugin 'settings.php' SQL Injection Vulnerability
An attacker can exploit this issue using a browser.
The following example URI is available:
http://www.example.com/wp-content/plugins/player/settings.php?playlist=1&theme=1[SQLI]
An attacker can exploit this issue using a browser.
The following example URI is available:
http://www.example.com/wp-content/plugins/player/settings.php?playlist=1&theme=1[SQLI]