CVEvulnerability
CVE-2013-3532
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-05-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter.
Affected configurations
• webdorado spider video player 2.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/92264 osvdb.org
- http://packetstormsecurity.com/files/121250/WordPress-Spider-Video-Player-2.1-SQL-Injection.html Exploit
- http://packetstormsecurity.com/files/128851/WordPress-HTML5-Flash-Player-SQL-Injection.html Exploit
- http://www.securityfocus.com/bid/59021 Exploit
- http://www.securityfocus.com/bid/70763 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83374 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98332 exchange.xforce.ibmcloud.com
- http://osvdb.org/92264 osvdb.org
- http://packetstormsecurity.com/files/121250/WordPress-Spider-Video-Player-2.1-SQL-Injection.html Exploit
- http://packetstormsecurity.com/files/128851/WordPress-HTML5-Flash-Player-SQL-Injection.html Exploit
- http://www.securityfocus.com/bid/59021 Exploit
- http://www.securityfocus.com/bid/70763 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/83374 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98332 exchange.xforce.ibmcloud.com