CVE-2014-5189 Information

Description

SQL injection vulnerability in lib/optin/optin_page.php in the Lead Octopus plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Reference

http://osvdb.org/show/osvdb/109642 http://packetstormsecurity.com/files/127640/WordPress-Lead-Octopus-Power-SQL-Injection.html http://www.securityfocus.com/bid/68934 https://exchange.xforce.ibmcloud.com/vulnerabilities/94912