EUVD-2015-5280

Malware in sbrugna...

WordPress plugin WP Championship 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Championship plugin versions prior to 9.3 are vulnerable to cross-site request forgery,...

CVE-2015-5308

Multiple SQL injection vulnerabilities in csadminusers.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user, 2 isadmin, 3 mail service, 4 mailresceipt, 5 stellv, 6 champtipp, 7 tippgroup, or 8 userid parameter...

CVE-2015-5308

The CVE-2015-5308 entry applies to the WordPress plugin wp-championship (version 5.8) and affects the cs_admin_users.php component. The connected documents confirm multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via parameters: user, isadmin, m...