CVE-2015-3313

概要

参考情報

• packetstormsecurity.com/files/131530/WordPress-Community-Events-1.3.5-SQL-Injection.html · Exploit
• openwall.com/lists/oss-security/2015/04/16/10 · Mailing List
• openwall.com/lists/oss-security/2015/05/08/3 · Mailing List
• securityfocus.com/bid/74234 · Third Party Advisory
• wordpress.org/plugins/community-events · Third Party Advisory
• exploit-db.com/exploits/36805 · Third Party Advisory

community events のその他の脆弱性

• CVE-2024-6270中 4.8The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2024-6271中 5.4The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make…
• CVE-2022-44742中 4.8Auth. (admin+) Stored Cross-Site Scripting vulnerability in Yannick Lefebvre Community Events plugin <= 1.4.8 versions.
• CVE-2021-24496中 6.1The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET para…