WordPress Community Events Plugin CVE-2015-3313 Multiple SQL Injection Vulnerabilities
BID:74234
CVE-2015-3313 |Info
WordPress Community Events Plugin CVE-2015-3313 Multiple SQL Injection Vulnerabilities
| Bugtraq ID: | 74234 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-3313 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2015 12:00AM |
| Updated: | Apr 14 2015 12:00AM |
| Credit: | Hannes Trunde |
| Vulnerable: |
WordPress Community Events 1.3.5 |
| Not Vulnerable: |
WordPress Community Events 1.4 |
Discussion
WordPress Community Events Plugin CVE-2015-3313 Multiple SQL Injection Vulnerabilities
The Community Events plugin for WordPress is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit these issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
The Community Events plugin for WordPress is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit these issues to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.