cve/2011/CVE-2011-4671.md

CVE-2011-4671

Description

SQL injection vulnerability in adrotate/adrotate-out.php in the AdRotate plugin 3.6.6, and other versions before 3.6.8, for WordPress allows remote attackers to execute arbitrary SQL commands via the track parameter (aka redirect URL).

POC

Reference

• http://www.exploit-db.com/exploits/18114

Github

• https://github.com/20142995/nuclei-templates