WordPress WP Symposium Plugin CVE-2015-3325 SQL Injection Vulnerability
BID:74237
Info
WordPress WP Symposium Plugin CVE-2015-3325 SQL Injection Vulnerability
| Bugtraq ID: | 74237 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-3325 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2015 12:00AM |
| Updated: | Jul 15 2015 12:09AM |
| Credit: | Hannes Trunde |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
WordPress WP Symposium Plugin CVE-2015-3325 SQL Injection Vulnerability
The WP Symposium plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
The WP Symposium plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query.
An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Exploit / POC
WordPress WP Symposium Plugin CVE-2015-3325 SQL Injection Vulnerability
An attacker can exploit this issue using a browser.
An attacker can exploit this issue using a browser.
Solution / Fix
WordPress WP Symposium Plugin CVE-2015-3325 SQL Injection Vulnerability
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
WordPress WP Symposium Plugin CVE-2015-3325 SQL Injection Vulnerability
References:
References:
- WP Symposium Download Page (WP Symposium)