CVE-2014-5200 – FBGorilla (All Versions) - SQL Injection

https://notcve.org/view.php?id=CVE-2014-5200

SQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. Vulnerabilidad de inyección SQL en game_play.php en el plugin FB Gorilla para WordPress permite a atacantes remotos ejecutar comandos SQL arbitrarios a través del parámetro id. • https://www.exploit-db.com/exploits/39283 http://packetstormsecurity.com/files/127639 https://exchange.xforce.ibmcloud.com/vulnerabilities/94916 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •