| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
| CVE-2015-6522 | 29 May 201815:50 | – | circl | |
| WordPress WP Symposium Plugin SQL Injection Vulnerability | 20 Aug 201500:00 | – | cnvd | |
| WordPress Symposium Plugin SQL Injection (CVE-2015-6522) | 8 Dec 201600:00 | – | checkpoint_advisories | |
| CVE-2015-6522 | 19 Aug 201515:00 | – | cvelist | |
| WordPress Symposium Plugin SQL Injection | 17 Nov 201614:04 | – | metasploit | |
| CVE-2015-6522 | 19 Aug 201515:59 | – | nvd | |
| WordPress WP Symposium Multiple SQL Injection Vulnerabilities | 24 Aug 201500:00 | – | openvas | |
| WordPress Symposium Plugin SQL Injection | 31 Aug 202400:00 | – | packetstorm | |
| WordPress Symposium Plugin 15.1 - SQL Injection #2 | 18 Aug 201500:00 | – | patchstack | |
| WordPress Symposium Plugin <= 15.7- SQL Injection | 19 Aug 201500:00 | – | patchstack |
| Source | Link |
|---|---|
| exploit-db | www.exploit-db.com/exploits/37824/ |
| wpvulndb | www.wpvulndb.com/vulnerabilities/8140 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| size | query param | wp-content/plugins/wp-symposium/get_album_item.php | Unauthenticated SQL Injection via the size parameter in get_album_item.php leading to remote code execution against the WP Symposium plugin (CWE-89). | CWE-89 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation