packetstormsecurity.com
http://packetstormsecurity.com/files/131530/WordPress-Community-Events-1.3.5-SQL-Injection.html CVE-2015-3313
CRITICAL
WordPress Plugin Community Events 1.3.5 - SQL Injection
Record summary
CVE-2015-3313 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in WordPress Community Events plugin before 1.4.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin Community Events 1.3.5 - SQL InjectionExploitDB exploitby Hannes TrundeNot analyzed1 file
References
7[oss-security] 20150416 Re: CVE request: SQL injection vulnerability in WordPress plugins Community Events 1.3.5, Tune Library 1.5.4, WP Symposium 15.1mailing list
http://www.openwall.com/lists/oss-security/2015/04/16/10 [oss-security] 20150508 Re: CVE request: SQL injection vulnerability in WordPress plugins Community Events 1.3.5, Tune Library 1.5.4, WP Symposium 15.1mailing list
http://www.openwall.com/lists/oss-security/2015/05/08/3 74234vdb entry
http://www.securityfocus.com/bid/74234 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2015-3313 wordpress.orgConfirmation
https://wordpress.org/plugins/community-events 36805exploit
https://www.exploit-db.com/exploits/36805