WordPress Theme Photocrati SQL Injection (CVE-2015-2216)

An SQL injection has been reported in WordPress Theme Photocrati. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2015-2216

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

CVE-2015-2216

The CVE-2015-2216 issue affects the Photocrati WordPress theme (version 4.x). A SQL injection in ecomm-sizes.php can be exploited via the prod_id parameter to execute arbitrary SQL commands. Public exploits exist for this vulnerability per Kaspersky’s advisories. Remediation: upgrade the Photocra...

CVE-2015-2216

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...