CVE-2011-4671

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL).

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.90% chance of exploitation in the next 30 days, 87th percentile

Published

2011-12-02

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/18114

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/18114
• https://www.exploit-db.com/exploits/17888

Security advisories

• http://downloads.wordpress.org/plugin/adrotate.3.6.8.zip
• http://www.securityfocus.com/bid/50674

References

• CVE Record
• NVD entry