Paid Downloads, 7b8687f1f31900513fbd409159e7db1eb5299096

CVE, Research URL: 7b8687f1f31900513fbd409159e7db1eb5299096
Home page URL: Security reports for Paid Downloads
Application: Paid Downloads
Published on: Sep 14, 2011
Research Description: Paid Downloads [paid-downloads] < 1.8.9 WordPress Auctions Plugin 1.8.8 - SQL Injection This WordPress Auctions plugin's "wpa_id" parameter is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Upgrade the plugin.
Affected versions: max 1.8.9.
Status: vulnerable