OSVDB: Open Sourced Vulnerability Database

Creditee: Miroslav Stampar

Known Contact Information:

(as of 2011-08-05)

Known Affiliations:

None at this time

Disclosed Vulnerabilities (22):

Disc. Date	OSVDB ID	CVEID	Title
2011-11-14	77507	2011-4671	AdRotate Plugin for WordPress adrotate/adrotate-out.php track Parameter SQL Injection
2011-10-12	83466		GD Star Rating Plugin for WordPress wp-content/plugins/gd-star-rating/export.php de Parameter SQL Injection
2011-09-24	84579		Link Library Plugin for WordPress link-library-ajax.php searchll Parameter SQL Injection
2011-09-22	76658		WP Bannerize Plugin for WordPress wp-content/plugins/wp-bannerize/ajax_sorter.php item[] Parameter SQL Injection
2011-09-10	86071		Tune Library Plugin for WordPress tune-library-ajax.php letter Parameter SQL Injection
2011-09-09	86069		A to Z Category Listing Plugin for WordPress post_retrive_ajax.php R Parameter SQL Injection
2011-09-07	86247		Paid Downloads Plugin for WordPress download.php download_key Parameter SQL Injection
2011-09-07	86245		Eventify - Simple Events Plugin for WordPress fetcheventdetails.php eventid Parameter SQL Injection
2011-09-01	74838		Donation Plugin for WordPress wp-content/plugins/wordpress-donation-plugin-with-goals-and-paypal-ipn-by-nonprofitcmsorg/exporttocsv.php did Parameter SQL Injection
2011-09-01	74835		WP Bannerize Plugin for WordPress wp-content/plugins/wp-bannerize/ajax_clickcounter.php id Parameter SQL Injection
2011-08-31	74832		yolink Search Plugin for WordPress wp-content/plugins/yolink-search/includes/bulkcrawl.php Multiple Parameter SQL Injection
2011-08-29	74813		SH Slideshow Plugin for WordPress wp-content/plugins/sh-slideshow/ajax.php id Parameter SQL Injection
2011-08-27	74804		Js-appointment Plugin for WordPress wp-content/plugins/js-appointment/searchdata.php cat Parameter SQL Injection
2011-08-27	74806		MM Forms Community Plugin for WordPress wp-content/plugins/mm-forms-community/includes/edit_details.php Parameter Keys SQL Injection
2011-08-19	74577		Global Content Blocks Plugin for WordPress wp-content/plugins/global-content-blocks/gcb/gcb_export.php gcb Parameter SQL Injection
2011-08-18	74574		WP DS FAQ Plugin for WordPress wp-content/plugins/wp-ds-faq/ajax.php id Parameter SQL Injection
2011-08-18	74578		Menu Creator Plugin for WordPress wp-content/plugins/wp-menu-creator/updateSortOrder.php menu_id Parameter SQL Injection
2011-08-17	74572		File Groups Plugin for WordPress wp-content/plugins/file-groups/download.php fgid Parameter SQL Injection
2011-08-17	74573		Contus HD FLV Player Plugin for WordPress wp-content/plugins/contus-hd-flv-player/process-sortable.php Multiple Parameter SQL Injection
2011-08-17	74575		Odihost Newsletter Plugin for WordPress wp-content/plugins/odihost-newsletter-plugin/includes/openstat.php id Parameter SQL Injection
2011-08-17	74664		WP Symposium Plugin for WordPress uploadify/get_profile_avatar.php uid Parameter SQL Injection
2011-08-05	74421		Social Slider Plugin for WordPress social-slider-2/ajax.php rA[] Parameter SQL Injection

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.