NetSight
IP …
high7.5

CVE-2013-6243

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL comm…

Impact

SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.

Affected products

VendorProductAffected versions
Landing Pages ProjectLanding Pages Plugin
through 1.2.3
Versions 1.0.3.7, 1.0.3.8, 1.0.3.9, 1.0.4.1, 1.0.4.2

Weakness classification

CWE-89

References