CVE-2010-2924 – myLinksDump <= 1.2 - SQL Injection

https://notcve.org/view.php?id=CVE-2010-2924

SQL injection vulnerability in myLDlinker.php in the myLinksDump Plugin 1.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the url parameter. NOTE: some of these details are obtained from third party information. Vulnerabilidad de inyección SQL en myLDlinker.php del complemento myLinksDump v1.2 de WordPress permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro url. NOTA: algunos de estos detalles han sido obtenidos de información de terceras partes. • https://www.exploit-db.com/exploits/14441 http://osvdb.org/66566 http://secunia.com/advisories/40692 http://www.exploit-db.com/exploits/14441 https://exchange.xforce.ibmcloud.com/vulnerabilities/60591 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •