Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in fmoblog 2.1

  • Severity: critical
  • Status: Open
  • Publication: March 17, 2009

The fMoblog plugin for WordPress has a security flaw that affects versions up to and including 2.1. Attackers can use the ‘id’ parameter to add extra SQL queries to the existing SQL query. These extra queries can be used to access sensitive information stored in the database. This is possible because the ‘id’ parameter is not properly escaped and the existing SQL query is poorly prepared.

Detected in:

fmoblog open vulnerable versions: >= * <= 2.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.