All packages
InfiniteWP Admin Panel vulnerabilities
3 known CVE vulnerabilities in InfiniteWP Admin Panel, translated and rated.
- CVE-2014-9521High
An unrestricted file upload vulnerability exists in the InfiniteWP Admin Panel before version 2.4.4 in uploadScript.php. This allows remote attackers to execute arbitrary code by uploading a file with a double extension.
- CVE-2014-9520High
SQL injection vulnerability in the InfiniteWP Admin Panel before version 2.4.4 in execute.php allows remote attackers to execute arbitrary SQL commands via the historyID parameter.
- CVE-2014-9519High
An SQL injection vulnerability in the InfiniteWP Admin Panel before version 2.4.3 in login.php allows remote attackers to execute arbitrary SQL commands via the email parameter.