Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-1854

SQL injection vulnerability in library/clicktracker.php in the AdRotate Pro plugin 3.9 through 3.9.5 and AdRotate Free plugin 3.9 through 3.9.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter.

Published

2014-02-27T15:55:15.623

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

10.0

Impact Score

6.4

Weaknesses

Type: Primary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	adrotateplugin	adrotate	3.9.	Yes
Application	adrotateplugin	adrotate	3.9.	Yes
Application	adrotateplugin	adrotate	3.9.1	Yes
Application	adrotateplugin	adrotate	3.9.1	Yes
Application	adrotateplugin	adrotate	3.9.2	Yes
Application	adrotateplugin	adrotate	3.9.2	Yes
Application	adrotateplugin	adrotate	3.9.3	Yes
Application	adrotateplugin	adrotate	3.9.3	Yes
Application	adrotateplugin	adrotate	3.9.4	Yes
Application	adrotateplugin	adrotate	3.9.4	Yes
Application	adrotateplugin	adrotate	3.9.5	Yes

References

http://secunia.com/advisories/57079 Vendor Advisory ([email protected])
http://www.adrotateplugin.com/2014/01/adrotate-pro-3-9-6-and-adrotate-free-3-9-5 Vendor Advisory ([email protected])
http://www.exploit-db.com/exploits/31834 Exploit ([email protected])
http://www.securityfocus.com/archive/1/531176/100/0/threaded ([email protected])
http://www.securityfocus.com/bid/65709 ([email protected])
https://exchange.xforce.ibmcloud.com/vulnerabilities/91253 ([email protected])
https://www.htbridge.com/advisory/HTB23201 Exploit ([email protected])
http://secunia.com/advisories/57079 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.adrotateplugin.com/2014/01/adrotate-pro-3-9-6-and-adrotate-free-3-9-5 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.exploit-db.com/exploits/31834 Exploit (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/archive/1/531176/100/0/threaded (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/65709 (af854a3a-2127-422b-91ae-364da2661108)
https://exchange.xforce.ibmcloud.com/vulnerabilities/91253 (af854a3a-2127-422b-91ae-364da2661108)
https://www.htbridge.com/advisory/HTB23201 Exploit (af854a3a-2127-422b-91ae-364da2661108)