Exploitation Summary
EIP tracks 2 public exploits for CVE-2011-4671. PoCs published by Miroslav Stampar.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in WordPress AdRotate plugin <= 3.6.6 via the 'track' parameter, which is Base64-encoded. The PoC uses a time-based blind SQL injection technique to verify the vulnerability.
Description
SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL).
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in WordPress AdRotate plugin <= 3.6.6 via the 'track' parameter, which is Base64-encoded. The PoC uses a time-based blind SQL injection technique to verify the vulnerability.
This exploit demonstrates a SQL injection vulnerability in WordPress AdRotate plugin <= 3.6.5. The vulnerability arises from improper sanitization of the 'track' parameter, allowing arbitrary SQL commands to be executed when magic_quotes is disabled.