vendor:
G-Lock Double Opt-in Manager
by:
SecurityFocus
7,5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: G-Lock Double Opt-in Manager
Affected Version From: 2.6.2
Affected Version To: 2.6.2
Patch Exists: YES
Related CWE: N/A
CPE: a:g-lock_software:g-lock_double_opt-in_manager
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2012
G-Lock Double Opt-in Manager SQL Injection Vulnerability
G-Lock Double Opt-in Manager plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Mitigation:
Input validation should be used to prevent SQL injection attacks.
