header-logo
Suggest Exploit
vendor:
WP-StarsRateBox
by:
7.5
CVSS
HIGH
SQL Injection
89
CWE
Product Name: WP-StarsRateBox
Affected Version From: 1.1
Affected Version To:
Patch Exists: NO
Related CWE:
CPE: a:wp-starsratebox_project:wp-starsratebox:1.1
Metasploit:
Other Scripts:
Platforms Tested: WordPress

SQL Injection vulnerability in WP-StarsRateBox plugin for WordPress

The WP-StarsRateBox plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Mitigation:

It is recommended to update WP-StarsRateBox plugin to the latest version available. Additionally, input validation and parameterized queries should be implemented to prevent SQL injection vulnerabilities.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/47423/info

The WP-StarsRateBox plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

WP-StarsRateBox 1.1 is vulnerable; other versions may also be affected.

http://www.example.com/wp-content/plugins/wp-starsratebox/wp-starsratebox.php?p=1&j=SQL_CODE_HERE

Navigation

Suggest Exploit

Services By CQR