Description

SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683.

Remediation

References

CVE-2008-4625

Related Vulnerabilities

WordPress Plugin WooCommerce PayU India (PayUmoney-PayUbiz) Parameter Tampering (2.1.1)

WordPress Plugin Another WordPress Classifieds Unspecified Vulnerability (1.8.9.4)

WebLogic Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-7103)

MediaWiki Improper Access Control Vulnerability (CVE-2016-6336)

PostgreSQL Untrusted Search Path Vulnerability (CVE-2020-14350)

Severity

High

Classification

CVE-2008-4625 CWE-138

Tags

Missing Update Known Vulnerabilities