CVE-2014-8810

WP Symposium plugin for WordPress (

Wordpress Wp Symposium 14.11 - Unauthenticated Shell Upload Exploit

Exploit for php platform in category web applications !/usr/bin/python Exploit Name: Wordpress WP Symposium 14.11 Shell Upload Vulnerability Vulnerability discovered by Claudio Viviani Exploit written by Claudio Viviani 2014-11-27: Discovered vulnerability 2014-12-01: Vendor Notification Twitter...

WP Symposium <= 14.11 - Unauthenticated Shell Upload

The wp-symposium WordPress plugin was affected by an Unauthenticated Shell Upload security vulnerability...

WordPress WP Symposium 14.11 Shell Upload

WP Symposium Plugin for WordPress contains a flaw that allows a remote attacker to execute arbitrary PHP code. This flaw exists because the /wp-symposium/server/fileuploadform.php script does not properly verify or sanitize user-uploaded files. By uploading a .php file, the remote system will pla...

WordPress Plugin Symposium 14.10 - SQL Injection

Exploit Title: WP Symposium 14.10 SQL Injection Date: 22-10-2014 Exploit Author: Kacper Szurek - http://security.szurek.pl/ http://twitter.com/KacperSzurek Software Link: https://downloads.wordpress.org/plugin/wp-symposium.14.10.zip Category: webapps CVE: CVE-2014-8810 1. Description $POST'tray' ...

WP Symposium <= 14.10 - XSS & SQL Injection

The wp-symposium WordPress plugin was affected by a XSS & SQL Injection security vulnerability...

WP Symposium <= 0.64 - SQL Injection

The wp-symposium WordPress plugin was affected by a SQL Injection security vulnerability...

WP Symposium <= 11.11.26 - Cross-Site Scripting (XSS)

The wp-symposium WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WP Symposium <= 11.11.26 - Remote File Upload Code Execution

The wp-symposium WordPress plugin was affected by a Remote File Upload Code Execution security vulnerability...

WP Symposium 13.04 - Unvalidated Redirect

The wp-symposium WordPress plugin was affected by an Unvalidated Redirect security vulnerability...

WP Symposium <= 12.07.07 - Authentication Bypass

The wp-symposium WordPress plugin was affected by an Authentication Bypass security vulnerability...

CVE-2013-2694

Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the u parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web script or HTML via the u parameter...

Open redirect

Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the u parameter...

CVE-2013-2695

CVE-2013-2695 concerns the WordPress WP Symposium plugin prior to 13.04, with a cross-site scripting (XSS) flaw in invite.php. The vulnerability allows remote attackers to inject arbitrary script/HTML through the u parameter. Affected component: invite.php in the WP Symposium plugin. Root cause: ...

CVE-2013-2695

Cross-site scripting XSS vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inject arbitrary web script or HTML via the u parameter...

CVE-2013-2694

WP Symposium WordPress plugin 13.04 contains an open redirect in invite.php exploitable via the u parameter, allowing redirects to arbitrary sites (phishing). Root cause: unvalidated/redirect parameters. Exploitation details are not provided in the connected documents. Impact is open redirect; no...

Wordpress wp-symposium plugin file upload vulnerability

Exploit for php platform in category web applications +----------------------------------------------------------------------+ Exploit Title: wordpress wp-symposium plugin file upload vulnerability Google Dork: inurl:/wp-content/plugins/wp-symposium/ Date: 11/06/2012 Author: Tunisian spl01t3r...

CVE-2011-5051

Summary: CVE-2011-5051 affects the WP Symposium WordPress plugin prior to 11.12.24. The vulnerability is an unrestricted file upload in two endpoints (uploadify/upload_admin_avatar.php and uploadify/upload_profile_avatar.php). An attacker could upload a file with an executable extension and then ...

CVE-2011-5051

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using 1 uploadify/uploadadminavatar.php or 2 uploadify/uploadprofileavatar.php, then accessi...