CVE-2012-2109
- State
- Published
- Severity
- Not scored
- Published
- Sep 4, 2012
- Updated
- Sep 17, 2024
- Reserved
- Apr 4, 2012
Description
SQL injection vulnerability in wp-load.php in the BuddyPress plugin 1.5.x before 1.5.5 of WordPress allows remote attackers to execute arbitrary SQL commands via the page parameter in an activity_widget_filter action.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://buddypress.org/2012/03/buddypress-1-5-5/
- 18690exploit
- 80763vdb-entry
- [oss-security] 20120416 Re: CVE-request: WordPress BuddyPress-plugin SQL-injection 1.5.4mailing-list
- [oss-security] 20120415 CVE-request: WordPress BuddyPress-plugin SQL-injection 1.5.4mailing-list
- 20120331 SQL injection in Wordpress plugin Buddypressmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.