WordPress Spider Facebook plug-in 'Facebook. php' SQL Injection Vulnerability

WordPress Spider Facebook plug-in 'Facebook. php' SQL Injection Vulnerability

Released on: 2014-09-07
Updated on:

Affected Systems:
WordPress Spider Facebook
Description:
Bugtraq id: 69675

WordPress Spider Facebook plug-ins include all available Facebook social extensions and tools.

Spider Facebook 1.0.8 and other versions have the SQL injection vulnerability in the 'Facebook. php' implementation. After successful exploitation, attackers can perform unauthorized database operations.

<* Source: fig
*>

Test method:

Alert

The following procedures (methods) may be offensive and are intended only for security research and teaching. Users are at your own risk!
Http://www.example.com/wordpress/wp-admin/admin.php? Page = Spider_Facebook_manage & amp; task = Spider_Facebook_edit & amp; id = 1 and 1 = 2

Suggestion:
Vendor patch:

WordPress
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://wordpress.org/plugins/spider-facebook/

This article permanently updates the link address: