Lucene search

CVE-2022-4165

🗓️ 26 Dec 2022 13:13:15Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 41 Views🌐 WEB

The Contest Gallery WordPress and Contest Gallery Pro WordPress plugins before 19.1.5.1 are vulnerable to SQL injection

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
WPVulnDB	Contest Gallery < 19.1.5 - Author+ SQL Injection	5 Dec 202200:00	–	wpvulndb
Vulnrichment	CVE-2022-4165 Contest Gallery < 19.1.5 - Author+ SQL Injection	26 Dec 202212:28	–	vulnrichment
Cvelist	CVE-2022-4165 Contest Gallery < 19.1.5 - Author+ SQL Injection	26 Dec 202212:28	–	cvelist
wpexploit	Contest Gallery < 19.1.5 - Author+ SQL Injection	5 Dec 202200:00	–	wpexploit
NVD	CVE-2022-4165	26 Dec 202213:15	–	nvd
Prion	Cross site request forgery (csrf)	26 Dec 202213:15	–	prion

Nvd

Vulners

Node

contest-gallery contest_galleryRange<19.1.5.1wordpress

contest-gallery contest_galleryRange<19.1.5.1prowordpress

[
  {
    "vendor": "Unknown",
    "product": "Contest Gallery",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "19.1.5.1"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  },
  {
    "vendor": "Unknown",
    "product": "Contest Gallery Pro",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "19.1.5.1"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
bulletin	www.bulletin.iese.de/post/contest-gallery_19-1-4-1_17
wpscan	www.wpscan.com/vulnerability/857aba7d-fccd-4672-b734-ab228440dcc0

Parameter	Position	Path	Description	CWE
cg_order	request body	/wp-admin/admin-ajax.php	SQL injection vulnerability due to unsanitized cg_order POST parameter leading to potential data leakage.	CWE-89, CWE-20

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Dec 2022 13:15Current

6.5Medium risk

Vulners AI Score6.5

CVSS36.5

EPSS0.00384

SSVC