PRODUCT PROFILE

wp-symposium

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

中危CVE-2015-94142019/09/26

WordPress Symposium <=15.8.1 - Cross-Site Scripting

WordPress Symposium through 15.8.1 contains a reflected cross-site scripting vulnerability via the wp-content/plugins/wp-symposium/get_album_item.php?size parameter which allows an attacker to steal cookie-based authentication credentials and launch other attacks.

wp-symposiumPoC 已收录

CVSS6.1EPSS 2.3%

高危CVE-2015-65222015/08/19

CVE-2015-6522

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to get_album_item.php.

wp-symposiumRCE

CVSS7.5EPSS 78.2%