CVE-2014-8809

Mô tả

Tham khảo

• security.szurek.pl/wp-symposium-1410-multiple-xss-and-sql-injection.html · Exploit
• wpsymposium.com/release-information-for-v14-11 · Vendor Advisory

Lỗ hổng khác của wp symposium

• CVE-2014-10021CAO 7.5Unrestricted file upload vulnerability in UploadHandler.php in the WP Symposium plugin 14.11 for WordPress allows remote attackers to execut…
• CVE-2014-8810TRUNG BÌNH 6.5SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated use…
• CVE-2013-2695TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in invite.php in the WP Symposium plugin before 13.04 for WordPress allows remote attackers to inje…
• CVE-2013-2694TRUNG BÌNH 5.8Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitr…
• CVE-2011-3841TRUNG BÌNH 4.3Cross-site scripting (XSS) vulnerability in uploadify/get_profile_avatar.php in the WP Symposium plugin before 11.12.08 for WordPress allows…