What is CVE-2013-2694?

CVE-2013-2694 is a vulnerability in Wpsymposiumpro Wp_symposium, classified under Improper Input Validation. Published 2014-03-28.

Is CVE-2013-2694 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Improper input validation in Wpsymposiumpro Wp_symposium

CVE-2013-2694

Open redirect vulnerability in invite.php in the WP Symposium plugin 13.04 for WordPress allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the u parameter.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.020 (78.7th percentile) — read the EPSS interpretation.

Affected products

Wpsymposiumpro Wp_symposium — versions 13.04
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

Public proof-of-concept exploits

20142995/nuclei-templates

References

PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (x_refsource_OSVDB, vdb-entry)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2013-2694?: CVE-2013-2694 is a vulnerability in Wpsymposiumpro Wp_symposium, classified under Improper Input Validation. Published 2014-03-28.
Is CVE-2013-2694 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.