2 matches found
Sql injection
SQL injection vulnerability in ajax/mailfunctions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tray parameter in a getMailMessage action...
6.5CVSS8.5AI score0.03609EPSS
SaveExploits4References4Affected Software1
CVE-2014-8810: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in ajax/mailfunctions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tray parameter in a getMailMessage action...
6.5CVSS6.4AI score0.03609EPSS
SaveExploits4References2
20