CVE-2015-5308

2015-11-02T14:59:07
ID CVE-2015-5308
Type cve
Reporter NVD
Modified 2015-11-03T21:47:44

Description

Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) champtipp, (7) tippgroup, or (8) userid parameter.