Secunia

enter_the_dragon has discovered a vulnerability in the AdServe plugin for WordPress, which can be exploited by malicious people to conduct SQL injection attacks.

Input passed to the "id" parameter in adclick.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

Successful exploitation allows e.g. retrieving usernames and password hashes for users and administrators, but requires knowledge of the database table prefix.

The vulnerability is confirmed in version 0.2. Other versions may also be affected.

Solution
Edit the source code to ensure that input is properly sanitised.

Provided and/or discovered by
enter_the_dragon

Changelog
Further details available in Customer Area

Original Advisory
http://milw0rm.com/exploits/5013

Deep Links
Links available in Customer Area