packetstormsecurity.com
http://packetstormsecurity.com/files/127639 CVE-2014-5200
WordPress Plugin FB Gorilla - 'game_play.php' SQL Injection
Record summary
CVE-2014-5200 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin FB Gorilla - 'game_play.php' SQL InjectionExploitDB exploitby Amirh03inNot analyzed1 file
References
3wp-fbgorilla-gameplay-sql-injection(94916)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/94916 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2014-5200