EUVD-2015-5280

Malware in sbrugna...

CVE-2015-5308

Multiple SQL injection vulnerabilities in csadminusers.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the 1 user, 2 isadmin, 3 mail service, 4 mailresceipt, 5 stellv, 6 champtipp, 7 tippgroup, or 8 userid parameter...

CVE-2015-5308

The CVE-2015-5308 entry applies to the WordPress plugin wp-championship (version 5.8) and affects the cs_admin_users.php component. The connected documents confirm multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via parameters: user, isadmin, m...