WP Symposium <= 12.07.07 - Authentication Bypass

The wp-symposium WordPress plugin was affected by an Authentication Bypass security vulnerability...

WP Symposium 13.04 - Unvalidated Redirect

The wp-symposium WordPress plugin was affected by an Unvalidated Redirect security vulnerability...

WP Symposium <= 11.11.26 - Remote File Upload Code Execution

The wp-symposium WordPress plugin was affected by a Remote File Upload Code Execution security vulnerability...

Wordpress Plugin Symposium <= 0.64 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress WP Symposium plugin = 0.64 SQL Injection Vulnerability Date: 2011-08-17 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-symposium.0.64.zip Version: 0.64 tested --- Po...

Red Button Attack Could Compromise Smart TVs

A vulnerability in an emerging interactive television standard could expose smart TVs to untraceable drive-by hacking attacks that could steal personal information and wreak havoc on televisions and anything connected to them. The feature, HbbTV, Hybrid Broadcast Broadband Television was introduc...

CVE-2013-2694

Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the u parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web script or HTML via the u parameter...

Open redirect

Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the u parameter...

CVE-2013-2694

WP Symposium WordPress plugin 13.04 contains an open redirect in invite.php exploitable via the u parameter, allowing redirects to arbitrary sites (phishing). Root cause: unvalidated/redirect parameters. Exploitation details are not provided in the connected documents. Impact is open redirect; no...

CVE-2013-2695

CVE-2013-2695 concerns the WordPress WP Symposium plugin prior to 13.04, with a cross-site scripting (XSS) flaw in invite.php. The vulnerability allows remote attackers to inject arbitrary script/HTML through the u parameter. Affected component: invite.php in the WP Symposium plugin. Root cause: ...

CVE-2013-2695

Cross-site scripting XSS vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web script or HTML via the u parameter...

Phone Hack Could Block Messages, Calls on GSM Networks

By tweaking the firmware on certain kinds of phones, a hacker could make it so other phones in the area are unable to receive incoming calls or SMS messages, according to research presented at the USENIX Security Symposium earlier this month. The hack involves modifying the baseband processor on...

Software Obfuscation Mechanism Hampers Reverse Engineering

Researchers at UCLA said they’ve developed a game-changing obfuscation mechanism that will put a dent in hackers’ efforts to reverse engineer patches and understand how an underlying piece of software works. “You write your software in a nice, reasonable, human-understandable way and then feed th...

WordPress Symposium Plugin XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

Air Force Classifies Some Cybersecurity Tools as Weapons

The United States government for years has been developing and deploying offensive cyber capabilities, most of it done without much in the way of public notice. That’s been changing of late, as government and military officials have become more open in discussing these capabilities and under what...

WordPress Symposium Plugin <= 13.03 - XSS

Because of this vulnerability in invite.php in, the attackers can inject arbitrary web script or HTML via the "u" parameter. Solution Update the plugin...

WordPress Symposium Plugin <= 13.03 - Open Redirection

Because of this vulnerability in invite.php, the attackers can redirect users to arbitrary web sites and conduct phishing attacks via a URL in the "u" parameter. Solution Update the plugin...

Wordpress wp-symposium plugin file upload vulnerability

Exploit for php platform in category web applications +----------------------------------------------------------------------+ Exploit Title: wordpress wp-symposium plugin file upload vulnerability Google Dork: inurl:/wp-content/plugins/wp-symposium/ Date: 11/06/2012 Author: Tunisian spl01t3r...

CVE-2011-5051

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using 1 uploadify/uploadadminavatar.php or 2 uploadify/uploadprofileavatar.php, then accessi...

CVE-2011-5051

Summary: CVE-2011-5051 affects the WP Symposium WordPress plugin prior to 11.12.24. The vulnerability is an unrestricted file upload in two endpoints (uploadify/upload_admin_avatar.php and uploadify/upload_profile_avatar.php). An attacker could upload a file with an executable extension and then ...