cve/2015/CVE-2015-7791.md

CVE-2015-7791

Description

Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) search[column] or (2) switch parameter.

POC

Reference

• https://wpvulndb.com/vulnerabilities/8356

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/ARPSyndicate/cvemon