SQL Injection in Landing Pages Project Plugin
CVE-2013-6243
SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the "post" parameter to index.php.
Vulnerability class: SQL Injection
EPSS: 0.025 (83.0th percentile) — read the EPSS interpretation.
Affected products
- Landing_pages_project Landing_pages_plugin — versions 1.0.3.7, 1.0.3.8, 1.0.3.9
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM, Exploit, Patch)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2013-6243?
- CVE-2013-6243 is a vulnerability in Landing Pages Project Plugin, classified under SQL Injection. Published 2013-10-23.
- Is CVE-2013-6243 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.