Description
A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in the id GET parameter supplied to get_script/index.php, and allows an attacker to execute arbitrary SQL queries in the context of the WP database user.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://idangero.us/ ↗
- https://github.com/idangerous/Plugins/tree/master/Chop%20Slider%203 ↗
- http://seclists.org/fulldisclosure/2020/May/26 ↗
- http://packetstormsecurity.com/files/157607/WordPress-ChopSlider-3-SQL-Injection.html ↗
- http://packetstormsecurity.com/files/157655/WordPress-ChopSlider3-3.4-SQL-Injection.html ↗