cve/2015/CVE-2015-6522.md

CVE-2015-6522

Description

SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the size parameter to get_album_item.php.

POC

Reference

• https://wpvulndb.com/vulnerabilities/8140
• https://www.exploit-db.com/exploits/37824/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Shamsuzzaman321/Wordpress-Exploit-AiO-Package