CVEs-PoC/2015/CVE-2015-2216.md

CVE-2015-2216

Description

SQL injection vulnerability in ecomm-sizes.php in the Photocrati theme 4.x for WordPress allows remote attackers to execute arbitrary SQL commands via the prod_id parameter.

POC

Reference

• http://packetstormsecurity.com/files/130595/WordPress-Photocrati-Theme-4.x.x-SQL-Injection.html
• https://wpvulndb.com/vulnerabilities/7818

Github

• https://github.com/20142995/nuclei-templates