BSK PDF Manager, CVE-2014-4944

CVE, Research URL: CVE-2014-4944
Home page URL: Security reports for BSK PDF Manager
Application: BSK PDF Manager
Published on: Jul 14, 2014
Research Description: Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) categoryid or (2) pdfid parameter to wp-admin/admin.php.
Affected versions: Min -, max 3.1.2.
Status: vulnerable