SQL injection vulnerability in the ajax_survey function in settings.php in the WordPress Survey and Poll plugin 1.1.7 for Wordpress allows remote attackers to execute arbitrary SQL commands via the survey_id parameter in an ajax_survey action to wp-admin/admin-ajax.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2015-02-26T15:00:00

Updated: 2024-08-06T05:02:43.431Z

Reserved: 2015-02-26T00:00:00

Link: CVE-2015-2090

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2015-02-26T15:59:04.370

Modified: 2024-11-21T02:26:46.380

Link: CVE-2015-2090

cve-icon Redhat

No data.