high7.5Public exploit code
CVE-2015-6522
SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size paramet…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin WP Symposium 15.1 - 'get_album_item.php' SQL Injection2015-08-18 · webapps · php
Impact
SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to get_album_item.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wpsymposium | Wp Symposium | through 15.7 |