WordPress WP Symposium 0.64 SQL Injection

Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $uid = $REQUEST'uid'; $sql = "SELECT profileavatar FROM ".$wpdb-baseprefix."symposiumusermeta WHERE uid = ".$uid;...

WordPress WP Symposium plugin <= 0.64 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $uid = $REQUEST'uid'; $sql = "SELECT profileavatar FROM ".$wpdb-baseprefix."symposiumusermeta WHERE...

WordPress Symposium Plugin <= 0.64 - SQL Injection

This WordPress Symposium plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin Symposium 0.64 - SQL Injection

Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $uid = $REQUEST'uid'; $sql = "SELECT profileavatar FROM ".$wpdb-baseprefix."symposiumusermeta WHERE uid = ".$uid;...

WordPress Plugin Symposium 0.64 - SQL Injection

WordPress Plugin Symposium 0.64 - SQL Injection Exploit Title: WordPress WP Symposium plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0 --------------- Vulnerable code --------------- $uid = $REQUEST'uid'; $sql = "SELECT profileavatar FROM ".$wpdb-baseprefix."symposiumusermeta WHERE uid =...

$30 Child Toy is enough to hack FBI Radios

$30 Child Toy is enough to hack FBI Radios The portable radios used by many federal law enforcement agents have major security flaws that allowed researchers to intercept hundreds of hours of sensitive traffic sent without encryption over the past two years, according to a new study being release...

Video: Researchers Knock Out a $3K First Responder's Radio With a $30 Children's Toy

During the Reagan Administration, the ‘government waste’ meme was all about $600 toilet seats and $300 hammers. Those looking for a more contemporary example of how government procurement gets it wrong might point, instead, to Project 25 P25, a decade old effort to provide first responders and...

Security Metrics Go Prime Time at Metricon 6

The metrics movement that has been slowly but surely infiltrating the security community in the last few years has had its own annual gathering–Metricon–for some time now. It’s been a small, quasi-academic conference since its inception, but now Metricon’s organizers are branching out a bit,...

Microsoft DirectX DirectShow QuickTime Video Remote Code Execution Vulnerability

Description Microsoft DirectX is prone to a remote code-execution vulnerability because the DirectShow component fails to properly handle QuickTime media files. Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application...

Research: Password 'secret question' woefully insecure

In research to be presented at the IEEE Symposium on Security and Privacy virginia.edu this week, researchers from Microsoft and Carnegie Mellon University plan to show that the secret questions used to secure the password-reset functions of a variety of websites are woefully insecure. In a study...

Leadership needed on DNS security

From Arbor Networks Danny McPherson The DNS system is one of the key underpinnings of the Internet, but because the system isn’t owned by any one entity, no one is responsible for the security of the entire network. The owner of each DNS server secures it as he sees fit, but as the discussions at...

Immunity Canvas: WPSYMPOSIUM_RCE

Name| wpsymposiumrce ---|--- CVE| CWE-434 Exploit Pack| CANVAS Description| WP-Symposium RCE Notes| CVE Name: CWE-434 VENDOR: www.wpsymposium.com Notes: WP-Symposium is a social networking plugin for WordPress with 150k downloads as of 12/12/2014. This is an exceptionally straight forward shell...