CVE Database
/

CVE-2015-2196

Back to search

CVE-2015-2196

Published: Mar 3, 2015

Modified: Sep 17, 2024

PUBLISHED

Description

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in a spiderbigcalendar_month action to wp-admin/admin-ajax.php.

VendorProductVersions

n/a

n/a

affected
n/a

References

36061
exploit
x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now