CVE-2015-5308

🗓️ 02 Nov 2015 19:00:00Reported by redhatType

cve

cve🔗 web.nvd.nist.gov👁 48 Views🌐 WEB

SQL injection in wp-championship plugin 5.8 for WordPres

Reporter	Title	Published	Views	Family All 8
CNVD	WordPress wp-championship plugin SQL injection vulnerability	4 Nov 201500:00	–	cnvd
Cvelist	CVE-2015-5308	2 Nov 201519:00	–	cvelist
EUVD	EUVD-2015-5280	7 Oct 202500:30	–	euvd
NVD	CVE-2015-5308	2 Nov 201519:59	–	nvd
Patchstack	WordPress WP Championship Plugin <= 5.8 - Multiple SQL Injection	1 Jul 201500:00	–	patchstack
Prion	Sql injection	2 Nov 201519:59	–	prion
wpexploit	wp-championship <= 5.8 - Authenticated Blind SQL Injection	23 Oct 201500:00	–	wpexploit
WPVulnDB	wp-championship <= 5.8 - Authenticated Blind SQL Injection	23 Oct 201500:00	–	wpvulndb

NVD

Node

wp-championship_project wp-championshipMatch5.8wordpress

Source	Link
wpvulndb	www.wpvulndb.com/vulnerabilities/8221
vapid	www.vapid.dhs.org/advisory.php

Parameter	Position	Path	Description	CWE
user	query param	wp-admin/wp-championship/cs_admin_users.php	Authenticated SQL injection in wp-championship cs_admin_users.php allowing injection via multiple parameters (e.g., userid) to execute arbitrary SQL.	CWE-89
isadmin	query param	wp-admin/wp-championship/cs_admin_users.php	Authenticated SQL injection in wp-championship cs_admin_users.php allowing injection via multiple parameters (e.g., userid) to execute arbitrary SQL.	CWE-89
mail service	query param	wp-admin/wp-championship/cs_admin_users.php	Authenticated SQL injection in wp-championship cs_admin_users.php allowing injection via multiple parameters (e.g., userid) to execute arbitrary SQL.	CWE-89
mailresceipt	query param	wp-admin/wp-championship/cs_admin_users.php	Authenticated SQL injection in wp-championship cs_admin_users.php allowing injection via multiple parameters (e.g., userid) to execute arbitrary SQL.	CWE-89
stellv	query param	wp-admin/wp-championship/cs_admin_users.php	Authenticated SQL injection in wp-championship cs_admin_users.php allowing injection via multiple parameters (e.g., userid) to execute arbitrary SQL.	CWE-89
champtipp	query param	wp-admin/wp-championship/cs_admin_users.php	Authenticated SQL injection in wp-championship cs_admin_users.php allowing injection via multiple parameters (e.g., userid) to execute arbitrary SQL.	CWE-89
tippgroup	query param	wp-admin/wp-championship/cs_admin_users.php	Authenticated SQL injection in wp-championship cs_admin_users.php allowing injection via multiple parameters (e.g., userid) to execute arbitrary SQL.	CWE-89
userid	query param	wp-admin/wp-championship/cs_admin_users.php	Authenticated SQL injection in wp-championship cs_admin_users.php allowing injection via multiple parameters (e.g., userid) to execute arbitrary SQL.	CWE-89

17 Jun 2026 00:28Current

8.9High risk

Vulners AI Score8.9

CVSS 27.5

EPSS0.02206

cve sql injection wp-championship plugin wordpress security vulnerability