What is CVE-2015-5308?

CVE-2015-5308 is a vulnerability in Wp-Championship Project, classified under SQL Injection. Published 2015-11-02.

Is CVE-2015-5308 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Wp-Championship Project

CVE-2015-5308

Multiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) user, (2) isadmin, (3) mail service, (4) mailresceipt, (5) stellv, (6) champtipp, (7) tippgroup, or (8) userid parameter.

Vulnerability class: SQL Injection

EPSS: 0.022 (80.7th percentile) — read the EPSS interpretation.

Affected products

Wp-championship_project Wp-championship — versions 5.8
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

References

secalert@redhat.com (Exploit, x_refsource_MISC, Vendor Advisory)
secalert@redhat.com (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2015-5308?: CVE-2015-5308 is a vulnerability in Wp-Championship Project, classified under SQL Injection. Published 2015-11-02.
Is CVE-2015-5308 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.