WordPress LeagueManager Plugin 3.8 - SQL Injection

#!/usr/bin/ruby

#

# Exploit Title: WordPress LeagueManager Plugin v3.8 SQL Injection

# Google Dork: inurl:"/wp-content/plugins/leaguemanager/"

# Date: 13/03/13

# Exploit Author: Joshua Reynolds

# Vendor Homepage: http://wordpress.org/extend/plugins/leaguemanager/

# Software Link: http://downloads.wordpress.org/plugin/leaguemanager.3.8.zip

# Version: 3.8

# Tested on: BT5R1 - Ubuntu 10.04.2 LTS

# CVE: CVE-2013-1852

source