high7.5
CVE-2011-5216
SQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for WordPress allows remote attackers to execute arbitrary SQL command…
Impact
SQL injection vulnerability in ajax.php in SCORM Cloud For WordPress plugin before 1.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the active parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Troyef | Scorm Cloud | through 1.0.6.6 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
| Wordpress | Wordpress | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://plugins.trac.wordpress.org/changeset/435356/scormcloud
- http://secunia.com/advisories/47198
- http://wordpress.org/extend/plugins/scormcloud/changelog/
- http://www.osvdb.org/77679
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71788
- http://plugins.trac.wordpress.org/changeset/435356/scormcloud
- http://secunia.com/advisories/47198
- http://wordpress.org/extend/plugins/scormcloud/changelog/
- http://www.osvdb.org/77679
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71788