CVEvulnerability
CVE-2015-5308
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-11-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) champtipp, (7) tippgroup, or (8) userid parameter.
Affected configurations
• wp-championship project wp-championship 5.8
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://www.vapid.dhs.org/advisory.php?v=155 Exploit
- https://wpvulndb.com/vulnerabilities/8221 Exploit, Vendor Advisory
- http://www.vapid.dhs.org/advisory.php?v=155 Exploit
- https://wpvulndb.com/vulnerabilities/8221 Exploit, Vendor Advisory