WordPress Symposium Pro Social Network 16.1 Cross Site Scripting

FULL DISCLOSURE Product : WP Symposium Pro Social Network plugin Exploit Author : Rahul Pratap Singh Home page Link : https://wordpress.org/plugins/wp-symposium-pro Version : 16.1 Website : 0x62626262.wordpress.com Twitter : @0x62626262 Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Dat...

WordPress Symposium Pro Social 15.12 XSS / CSRF

Product : WP Symposium Pro Social Network plugin Exploit Author : Rahul Pratap Singh Home page Link : https://wordpress.org/plugins/wp-symposium-pro Version : 15.12 Website : 0x62626262.wordpress.com Twitter : @0x62626262 Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 8/Jan/2016 ...

WordPress Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities

Exploit for python platform in category web applications Product : WP Symposium Pro Social Network plugin Exploit Author : Rahul Pratap Singh Home page Link : https://wordpress.org/plugins/wp-symposium-pro Version : 15.12 Website : 0x62626262.wordpress.com Twitter : @0x62626262 Linkedin :...

WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities

Product : WP Symposium Pro Social Network plugin Exploit Author : Rahul Pratap Singh Home page Link : https://wordpress.org/plugins/wp-symposium-pro Version : 15.12 Website : 0x62626262.wordpress.com Twitter : @0x62626262 Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 8/Jan/2016 ...

WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities

WordPress Plugin WP Symposium Pro Social Network Plugin 15.12 - Multiple Vulnerabilities Product : WP Symposium Pro Social Network plugin Exploit Author : Rahul Pratap Singh Home page Link : https://wordpress.org/plugins/wp-symposium-pro Version : 15.12 Website : 0x62626262.wordpress.com Twitter ...

WordPress Symposium Pro Plugin <= 15.12 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and critical cross site request forgery vulnerabilities. Solution Update the plugin...

WordPress Symposium 14.05.02 Cross Site Scripting

Plugin Name : WP Symposium Effected Version : 14.05.02 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Unauthenticated PoC - Proof of Concept : The following fields put the payloa...

WordPress Symposium 14.05.02 Cross Site Request Forgery

Plugin Name : WP Symposium A8-Cross-SiteRequestForgeryCSRF Effected Version : 14.05.02 and most probably lower version's if any Vulnerability : A8-Cross-Site Request Forgery CSRF Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Unauthenticated PoC - Proof of Concep...

WordPress WP Symposium plugin 'forum_functions.php' SQL injection vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on servers with PHP and MySQL.The WordPress WP Symposium plugin is a web plugin that adds social features. The WordPress WP Symposium plugin...

WP Symposium <= 15.8.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The wp-symposium WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/wp-symposium/getalbumitem.php?size=...

WP Symposium <= 15.8.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The wp-symposium WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/wp-symposium/getalbumitem.php?size=alert/xss/...

WordPress WP Symposium插件SQL注入漏洞

WordPress是WordPress软件基金会的一套使用PHP语言开发的博客平台，该平台支持在PHP和MySQL的服务器上架设个人博客网站。WP Symposium是其中的一个社交网络插件。WordPress WP Symposium插件 15.8之前版本中 存在 SQL注入漏洞 .该漏洞源于getalbumitem.php脚本没有充分过滤‘size’参数。远程攻击者可利用该漏洞执行任意SQL命令。CNNVD编号： CNNVD-201508-432CVE编号： CVE-2015-6522...

BitTorrent Patches DDoS Vulnerability

BitTorrent today announced that a patch has been rolled out in the libuTP protocol used by many of its clients, fixing a vulnerability that allows attackers to carry out distributed reflective denial of service attacks. The issue was revealed in a paper and presentation at the recent USENIX...

MassVet Android Malicious App Scanner

Most Android malware samples can be found clinging to some sort of knockoff to a legitimate application. Hiding in plain sight like that, sometimes they find their way into Google Play or any one of the dozens of less-patrolled Android markets. Researchers at Indiana University believe they’ve co...

WP Symposium Plugin for WordPress forum_functions.php 'topic_id' Parameter SQLi

The WordPress WP Symposium Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'topicid' parameter of the forumfunctions.php script. An unauthenticated, remote attacker can exploit this issue to conduct ...

WordPress WP Symposium Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.WP Symposium is one of the social networking plug-ins. A SQL injection vulnerability exists in WordPress WP Symposium plugin...

CVE-2015-6522

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to getalbumitem.php...

Sql injection

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to getalbumitem.php...

CVE-2015-6522

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to getalbumitem.php...

CVE-2015-6522

CVE-2015-6522 is a SQL injection vulnerability in the WordPress WP Symposium plugin, affecting versions before 15.8. The flaw allows remote attackers to execute arbitrary SQL commands through the size parameter of get_album_item.php. Documented sources confirm the vulnerability and its exposure v...