Description

SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via unspecified vectors. NOTE: it is not clear whether this issue crosses privilege boundaries.

Remediation

References

CVE-2008-0616

Related Vulnerabilities

TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2020-15098)

WordPress Plugin Really Simple Gallery Cross-Site Scripting (1.4)

Oracle Database Server CVE-2011-3525 Vulnerability (CVE-2011-3525)

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15700)

Apache HTTP Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2687)

Severity

Medium

Classification

CVE-2008-0616 CWE-138

Tags

Missing Update Known Vulnerabilities