Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Ads Box 1.0

  • Severity: critical
  • Status: Open
  • Publication: November 25, 2012

The Ads Box plugin for WordPress is vulnerable to a type of attack called generic SQL Injection. This type of attack happens when an attacker is able to add extra code to an existing SQL query, which can be used to get confidential information from the database. The vulnerability exists in all versions of the plugin up to and including 1.0, as the plugin does not properly escape the user supplied parameter and does not prepare the existing SQL query properly.

Detected in:

Ads Box open vulnerable versions: >= * <= 1.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.