title: Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection
description: The Broken Link Manager WordPress plugin through 0.6.5 does not sanitise, validate or escape the url GET parameter before using it in a SQL statement when retrieving an URL to edit, leading to an authenticated SQL injection issue
problem types: CWE-89 SQL Injection
affected:
{
product: Broken Link Manager
vendor: Unknown
versions:
lessThanOrEqual: 0.6.5, status: affected, version: 0.6.5, versionType: custom
}