CVEvulnerability
CVE-2013-6243
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-10-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.
Affected configurations
• landing pages project landing pages plugin (<= 1.2.3)
• landing pages project landing pages plugin 1.0.3.7
• landing pages project landing pages plugin 1.0.3.8
• landing pages project landing pages plugin 1.0.3.9
• landing pages project landing pages plugin 1.0.4.1
• landing pages project landing pages plugin 1.0.4.2
• landing pages project landing pages plugin 1.0.4.4
• landing pages project landing pages plugin 1.0.5.1
• landing pages project landing pages plugin 1.0.5.3
• landing pages project landing pages plugin 1.0.5.6
• landing pages project landing pages plugin 1.0.7.1
• landing pages project landing pages plugin 1.0.7.3
• landing pages project landing pages plugin 1.0.7.9
• landing pages project landing pages plugin 1.0.8.1
• landing pages project landing pages plugin 1.0.8.4
• landing pages project landing pages plugin 1.0.8.5
• landing pages project landing pages plugin 1.0.8.6
• landing pages project landing pages plugin 1.0.9.0
• landing pages project landing pages plugin 1.0.9.3
• landing pages project landing pages plugin 1.0.9.4
• landing pages project landing pages plugin 1.0.9.9
• landing pages project landing pages plugin 1.1
• landing pages project landing pages plugin 1.1.0.1
• landing pages project landing pages plugin 1.1.7
• landing pages project landing pages plugin 1.1.8
• landing pages project landing pages plugin 1.1.9
• landing pages project landing pages plugin 1.2.1
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/98334 osvdb.org
- http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages Exploit, Patch
- http://secunia.com/advisories/55192 Vendor Advisory
- http://wordpress.org/plugins/landing-pages/changelog wordpress.org
- http://www.securityfocus.com/bid/62942 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87803 exchange.xforce.ibmcloud.com
- http://osvdb.org/98334 osvdb.org
- http://plugins.trac.wordpress.org/changeset?reponame=&old=785535%40landing-pages&new=785535%40landing-pages Exploit, Patch
- http://secunia.com/advisories/55192 Vendor Advisory
- http://wordpress.org/plugins/landing-pages/changelog wordpress.org
- http://www.securityfocus.com/bid/62942 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/87803 exchange.xforce.ibmcloud.com