cleantalk
Vulnerabilities and Security Researches

Download Monitor, CVE-2008-1646

CVE, Research URL

CVE-2008-1646

Application

Download Monitor

Published on
Apr 02, 2008
Research Description
SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dl_id parameter.
Affected versions
max 1.7.1.
Status
vulnerable