Title: WassUp Plugin for WordPress spy.php Multiple Variable SQL Injection
Info
Disclosure
Jan 30, 2008
Discovery
Unknown
Dates
Exploit
Jan 30, 2008
Solution
Unknown
Description
Classification
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Confidentiality,
Loss of Integrity
Solution:
Solution Unknown
Exploit:
Exploit Unknown
Disclosure:
Uncoordinated Disclosure
OSVDB:
Web Related
Solution
Upgrade to version 1.4.3a or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.