CVE-2015-6522

This exploit demonstrates an unauthenticated SQL injection vulnerability in the WordPress plugin wp-symposium (versions up to 15.5.1). The vulnerability is exploited via the 'size' parameter in get_album_item.php, allowing an attacker to retrieve database content, including user details and password hashes.

This Metasploit module exploits a SQL injection vulnerability in the WP Symposium plugin for WordPress, allowing remote attackers to extract user credentials via the 'size' parameter in get_album_item.php. It automates the retrieval of user IDs and credentials by injecting SQL queries.