FBGorilla (All Versions) - SQL Injection
criticalSQL injection vulnerability in game_play.php in the FB Gorilla plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.
- CVSS:
- 9.8
- Affected:
- up to *
- Fix:
- No patched version reported
- Disclosed:
- Jul 28, 2014