CVE-2013-5673
IndiaNIC Testimonial plugin 2.2 - SQL Injection via custom_query Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-5673. PoCs published by RogueCoder.
AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in the Testimonial WordPress plugin (version 2.2), including XSS, CSRF, and SQL injection. It provides proof-of-concept forms to trigger these vulnerabilities via crafted input fields.
Description
SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the custom_query parameter in a testimonial_add action to wp-admin/admin-ajax.php.
Exploits (1)
The exploit demonstrates multiple vulnerabilities in the Testimonial WordPress plugin (version 2.2), including XSS, CSRF, and SQL injection. It provides proof-of-concept forms to trigger these vulnerabilities via crafted input fields.