high7.5Public exploit code
CVE-2015-3325
SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin WP Symposium 15.1 - '&show=' SQL Injection2015-05-21 · webapps · php
Impact
SQL injection vulnerability in forum.php in the WP Symposium plugin before 15.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the show parameter in the QUERY_STRING to the default URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpsymposium | Wp Symposium | through 15.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/131801/WordPress-WP-Symposium-15.1-SQL-Injection.html
- http://www.securityfocus.com/bid/74237
- https://www.exploit-db.com/exploits/37080/
- http://packetstormsecurity.com/files/131801/WordPress-WP-Symposium-15.1-SQL-Injection.html
- http://www.securityfocus.com/bid/74237
- https://www.exploit-db.com/exploits/37080/