S-157: WordPress WassUp Plugin 'spy.php' Vulnerability


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) S-157: WordPress WassUp Plugin 'spy.php' Vulnerability
# 1  
Old 02-01-2008
S-157: WordPress WassUp Plugin 'spy.php' Vulnerability

WordPress WassUp plugin in prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. The risk is MEDIUM. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread

1 More Discussions You Might Find Interesting

1. What is on Your Mind?

Cybersecurity - Wordpress Plugin Developer Wanted

https://www.unix.com/members/1-albums112-picture680.png (0 Replies)
Discussion started by: Neo
0 Replies
Login or Register to Ask a Question
MSSQL_QUERY(3)															    MSSQL_QUERY(3)

mssql_query - Send MS SQL query

SYNOPSIS
mixed mssql_query (string $query, [resource $link_identifier], [int $batch_size]) DESCRIPTION
mssql_query(3) sends a query to the currently active database on the server that's associated with the specified link identifier. PARAMETERS
o $query - An SQL query. o $link_identifier - A MS SQL link identifier, returned by mssql_connect(3) or mssql_pconnect(3). If the link identifier isn't specified, the last opened link is assumed. If no link is open, the function tries to establish a link as if mssql_connect(3) was called, and use it. o $batch_size - The number of records to batch in the buffer. RETURN VALUES
Returns a MS SQL result resource on success, TRUE if no rows were returned, or FALSE on error. EXAMPLES
Example #1 mssql_query(3) example <?php // Connect to MSSQL $link = mssql_connect('KALLESPCSQLEXPRESS', 'sa', 'phpfi'); if (!$link || !mssql_select_db('php', $link)) { die('Unable to connect or select database!'); } // Do a simple query, select the version of // MSSQL and print it. $version = mssql_query('SELECT @@VERSION'); $row = mssql_fetch_array($version); echo $row[0]; // Clean up mssql_free_result($version); ?> NOTES
Note If the query returns multiple results then it is necessary to fetch all results by mssql_next_result(3) or free the results by mssql_free_result(3) before executing next query. SEE ALSO
mssql_select_db(3), mssql_connect(3). PHP Documentation Group MSSQL_QUERY(3)