CVE-2015-9392

Description

References

• seclists.org/bugtraq/2015/Dec/13 · Exploit
• wordpress.org/plugins/users-ultra · Product
• wpvulndb.com/vulnerabilities/8350 · Third Party Advisory

Autres vulnérabilités de users ultra membership

• CVE-2015-9402ÉLEVÉE 8.8The users-ultra plugin before 1.5.59 for WordPress has uultra-form-cvs-form-conf arbitrary file upload.
• CVE-2015-9395ÉLEVÉE 8.8The users-ultra plugin before 1.5.64 for WordPress has SQL Injection via an ajax action.
• CVE-2015-9394ÉLEVÉE 8.8The users-ultra plugin before 1.5.63 for WordPress has CSRF via action=package_add_new to wp-admin/admin-ajax.php.
• CVE-2015-9393MOYENNE 5.4The users-ultra plugin before 1.5.63 for WordPress has XSS via the p_desc parameter.