Unscored CVE-2014-9520 EUVD-2014-9335GHSA-977q-p8w4-r8c5

SQL injection vulnerability in execute.php in InfiniteWP Admin Panel before 2.4.4 allows remote attackers to execute arbitrary SQL commands…

Published Jan 5, 2015 · Updated Sep 17, 2024 · Assigned by mitre

Description

SQL injection vulnerability in execute.php in InfiniteWP Admin Panel before 2.4.4 allows remote attackers to execute arbitrary SQL commands via the historyID parameter.

References

https://lifeforms.nl/20141210/infinitewp-vulnerabilities/
20141210 Multiple vulnerabilities in InfiniteWP Admin Panel mailing-list