CVE-2015-5308

2015-11-0219:00:00

redhat

www.cve.org

AI Score

8.6

Confidence

Low

EPSS

0.002

Percentile

53.3%

JSON

Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) champtipp, (7) tippgroup, or (8) userid parameter.