91442vdb entry
http://osvdb.org/91442 CVE-2013-1852
WordPress Plugin LeagueManager 3.8 - SQL Injection
Record summary
CVE-2013-1852 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in leaguemanager.php in the LeagueManager plugin before 3.8.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the league_id parameter in the leaguemanager-export page to wp-admin/admin.php.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin LeagueManager 3.8 - SQL InjectionExploitDB exploitby Joshua ReynoldsNot analyzed1 file
References
5packetstormsecurity.com
http://packetstormsecurity.com/files/120817/WordPress-LeagueManager-3.8-SQL-Injection.html wordpress.orgConfirmation
http://wordpress.org/plugins/leaguemanager/changelog 24789exploit
http://www.exploit-db.com/exploits/24789 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-1852