CVE-2015-9454 – Smooth Slider < 2.7 - Authenticated SQL Injection

https://notcve.org/view.php?id=CVE-2015-9454

The smooth-slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php?page=smooth-slider-admin current_slider_id parameter. El plugin smooth-slider versiones anteriores a 2.7 para WordPress, presenta una inyección SQL por medio del parámetro current_slider_id de wp-admin/admin.php?page=smooth-slider-admin. The Smooth Slider plugin before 2.7 for WordPress has SQL Injection via the wp-admin/admin.php? • http://cinu.pl/research/wp-plugins/mail_36e814da6ac4dd903be2c77cfbdd0afd.html https://wordpress.org/plugins/smooth-slider/#developers https://wpvulndb.com/vulnerabilities/8284 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •