Unscored CVE-2014-9519 EUVD-2014-9334GHSA-7v9p-g6m8-ppvr

SQL injection vulnerability in login.php in InfiniteWP Admin Panel before 2.4.3 allows remote attackers to execute arbitrary SQL commands v…

Published Jan 5, 2015 · Updated Sep 16, 2024 · Assigned by mitre

Description

SQL injection vulnerability in login.php in InfiniteWP Admin Panel before 2.4.3 allows remote attackers to execute arbitrary SQL commands via the email parameter.

References

https://lifeforms.nl/20141210/infinitewp-vulnerabilities/
20141210 Multiple vulnerabilities in InfiniteWP Admin Panel mailing-list