CVE-2022-4153

🗓️ 26 Dec 2022 12:27:56Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 61 Views🌐 WEB

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the upload[] POST parameter before concatenating it to an SQL query in get-data-create-upload-v10.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-4153	11 Apr 202523:51	–	circl
CNNVD	WordPress Plugin Contest Gallery SQL注入漏洞	26 Dec 202200:00	–	cnnvd
Cvelist	CVE-2022-4153 Contest Gallery < 19.1.5.1 - Author+ SQL Injection	26 Dec 202212:27	–	cvelist
EUVD	EUVD-2022-51514	3 Oct 202520:07	–	euvd
NVD	CVE-2022-4153	26 Dec 202213:15	–	nvd
Prion	Cross site request forgery (csrf)	26 Dec 202213:15	–	prion
Positive Technologies	PT-2022-25916 · WordPress · Contest Gallery Pro +1	26 Dec 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-4153	22 May 202523:29	–	redhatcve
Vulnrichment	CVE-2022-4153 Contest Gallery < 19.1.5.1 - Author+ SQL Injection	26 Dec 202212:27	–	vulnrichment
wpexploit	Contest Gallery < 19.1.5.1 - Author+ SQL Injection	5 Dec 202200:00	–	wpexploit

NVD

Vulners

Node

contest-gallery contest_galleryRange<19.1.5.1wordpress

contest-gallery contest_galleryRange<19.1.5.1prowordpress

[
  {
    "vendor": "Unknown",
    "product": "Contest Gallery",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "19.1.5.1"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  },
  {
    "vendor": "Unknown",
    "product": "Contest Gallery Pro",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "19.1.5.1"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/35b0126d-9293-4e64-a00f-0903303f960a
bulletin	www.bulletin.iese.de/post/contest-gallery_19-1-4-1_7

Parameter	Position	Path	Description	CWE
upload[1//AND//(SELECT//7741//FROM/**/(SELECT(SLEEP(5)))hlAf)][type]	request body	/wp-admin/admin-ajax.php?page=contest-gallery/index.php&option_id=1&define_upload=true	SQL injection vulnerability via unsanitized upload[] parameter in get-data-create-upload-v10.php affecting Contest Gallery plugins	CWE-89

12 Apr 2025 00:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.5

EPSS0.00583

SSVC