medium6.5
CVE-2014-5183
SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authentica…
Impact
SQL injection vulnerability in includes/mode-edit.php in the Simple Retail Menus (simple-retail-menus) plugin before 4.1 for WordPress allows remote authenticated editors to execute arbitrary SQL commands via the targetmenu parameter in an edit action to wp-admin/admin.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Simple Retail Menus Plugin Project | Simple-Retail-Menus | through 4.0.1 Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=861170%40simple-retail-menus&old=728969%40simple-retail-menus&sfp_email=&sfph_mail=#file1
- http://codevigilant.com/disclosure/wp-plugin-simple-retail-menus-a1-injection
- https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=861170%40simple-retail-menus&old=728969%40simple-retail-menus&sfp_email=&sfph_mail=#file1