CVE-2011-4673

Description

SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

• Automattic / Jetpack

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/71404
• EXPLOIThttp://www.exploit-db.com/exploits/18126
• MISChttp://www.securityfocus.com/bid/50730