CVE-2015-2216

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Sql injection

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

PT-2015-5668

Name of the Vulnerable Software and Affected Versions Photocrati theme versions 4.x Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the prod id parameter in the ecomm-sizes.php file. Recommendations For Photocrati theme version 4.x, consider...

CVE-2015-2216: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prodid parameter...

Photocrati Theme 4.x.x - SQL Injection

http://www.example.com/wp-content/themes/photocrati-theme-path/ecomm-sizes.php?prodid=SQL...

CVE-2014-100016: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in photocrati-gallery/ecomm-sizes.php in the Photocrati theme for WordPress allows remote attackers to inject arbitrary web script or HTML via the prodid parameter...

WordPress Photocrati Cross Site Scripting

Exploit Title : Wordpress Photocrati-theme Cross Site Scripting Exploit Author : ACC3SS Vendor Homepage : http://www.photocrati.com Google Dork : inurl : inurl:wp-content/themes/photocrati-theme/photocrati-gallery Date : 2014-01-29 Tested on : Windows 7 Location :...