mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-07 21:46:40 +02:00
688 B
688 B
CVE-2014-8810
Description
SQL injection vulnerability in ajax/mail_functions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tray parameter in a getMailMessage action.
POC
Reference
Github
No PoCs found on GitHub currently.