Description

SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the newsletter parameter, a different vector than CVE-2008-0683.

Remediation

References

CVE-2008-4625

Related Vulnerabilities

WordPress Plugin DiveBook Multiple Vulnerabilities (1.1.4)

PHP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-10547)

WebLogic CVE-2021-35552 Vulnerability (CVE-2021-35552)

WordPress Plugin Easy Contact Form Pro Cross-Site Scripting (1.1.1.8)

WordPress Plugin Twenty20 Image Before-After Malicious Code (1.6.3)

Severity

High

Classification

CVE-2008-4625 CWE-138

Tags

Missing Update Known Vulnerabilities