CVE-2011-4803

Bravenewcode Wptouch - SQL Injection

Title source: rule
STIX 2.1

Description

SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Exploits (1)

exploitdb WORKING POC
by longrifle0x · textwebappsphp
https://www.exploit-db.com/exploits/18039

References (1)

Core 1
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/18039

Scores

EPSS 0.0124
EPSS Percentile 79.4%

Details

CWE
CWE-89
Status published
Products (50)
bravenewcode/wptouch 1.0
bravenewcode/wptouch 1.1
bravenewcode/wptouch 1.2
bravenewcode/wptouch 1.3.5
bravenewcode/wptouch 1.4
bravenewcode/wptouch 1.5
bravenewcode/wptouch 1.6
bravenewcode/wptouch 1.7.5
bravenewcode/wptouch 1.8.9.1
bravenewcode/wptouch 1.8.9.3
... and 40 more
Published Dec 14, 2011
Tracked Since Feb 18, 2026