CVE-2014-9173

SQL injection vulnerability in view.php in the Google Doc Embedder plugin before 2.5.15 for WordPress allows remote attackers to execute arbitrary SQL commands via the gpid parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

5.02% chance of exploitation in the next 30 days, 92th percentile

Published

2014-12-02

Updated

2024-08-06

Proof-of-concept exploits (2)

• http://www.exploit-db.com/exploits/35371
• ratiros01/CVE-2014-9173

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/35447
• https://www.exploit-db.com/exploits/35371

References

• CVE Record
• NVD entry

Related

• CVE-2002-0082
• CVE-2004-1561
• CVE-2014-8609
• CVE-2014-9148
• CVE-2014-9175
• CVE-2014-9147