CVE-2011-4803: SQL Injection
Published Dec 14, 2011
·Updated
SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
Affected Software
54 affected components
Bravenewcode Wptouch=1.0
Bravenewcode Wptouch=1.1
Bravenewcode Wptouch=1.2
Bravenewcode Wptouch=1.3.5
Bravenewcode Wptouch=1.4
Bravenewcode Wptouch=1.5
Bravenewcode Wptouch=1.6
Bravenewcode Wptouch=1.7.5
Bravenewcode Wptouch=1.8.9.1
Bravenewcode Wptouch=1.8.9.3
Bravenewcode Wptouch=1.9
Bravenewcode Wptouch=1.9.1
Bravenewcode Wptouch=1.9.5
Bravenewcode Wptouch=1.9.6
Bravenewcode Wptouch=1.9.7.6
Bravenewcode Wptouch=1.9.7.7
Bravenewcode Wptouch=1.9.8
Bravenewcode Wptouch=1.9.8.1
Bravenewcode Wptouch=1.9.8.2
Bravenewcode Wptouch=1.9.8.3
Bravenewcode Wptouch=1.9.9
Bravenewcode Wptouch=1.9.9.1
Bravenewcode Wptouch=1.9.9.2
Bravenewcode Wptouch=1.9.9.3
Bravenewcode Wptouch=1.9.9.4
Bravenewcode Wptouch=1.9.9.5
Bravenewcode Wptouch=1.9.9.6
Bravenewcode Wptouch=1.9.9.7
Bravenewcode Wptouch=1.9.9.8
Bravenewcode Wptouch=1.9.10
Bravenewcode Wptouch=1.9.11
Bravenewcode Wptouch=1.9.12
Bravenewcode Wptouch=1.9.13
Bravenewcode Wptouch=1.9.14
Bravenewcode Wptouch=1.9.15
Bravenewcode Wptouch=1.9.16
Bravenewcode Wptouch=1.9.17
Bravenewcode Wptouch=1.9.18
Bravenewcode Wptouch=1.9.19
Bravenewcode Wptouch=1.9.19.1
Bravenewcode Wptouch=1.9.19.2
Bravenewcode Wptouch=1.9.19.3
Bravenewcode Wptouch=1.9.19.4
Bravenewcode Wptouch=1.9.19.5
Bravenewcode Wptouch=1.9.20
Bravenewcode Wptouch=1.9.21
Bravenewcode Wptouch=1.9.21.1
Bravenewcode Wptouch=1.9.22
Bravenewcode Wptouch=1.9.22.1
Bravenewcode Wptouch=1.9.23
Bravenewcode Wptouch=1.9.24
Bravenewcode Wptouch=1.9.25
Bravenewcode Wptouch=1.9.26
WordPress WordPress
Event History
Dec 14, 2011
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
12:55 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-4803?
CVE-2011-4803 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2011-4803?
To fix CVE-2011-4803, update the WPTouch plugin to version 1.9.27 or later.
3
Which versions of WPTouch are affected by CVE-2011-4803?
CVE-2011-4803 affects WPTouch versions from 1.0 to 1.9.26.
4
Can CVE-2011-4803 be exploited remotely?
Yes, CVE-2011-4803 can be exploited remotely by attackers without needing authentication.
5
What type of vulnerability is CVE-2011-4803?
CVE-2011-4803 is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands.