Lucene search

[email protected]CVE-2022-47588

HistoryNov 03, 2023 - 12:15 p.m.

CVE-2022-47588

2023-11-0312:15:08

CWE-89

[email protected]

web.nvd.nist.gov

cve

2022

47588

sql injection

tips and tricks hq

peter petreski

simple photo gallery

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

JSON

Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Tips and Tricks HQ, Peter Petreski Simple Photo Gallery simple-photo-gallery allows SQL Injection.This issue affects Simple Photo Gallery: from n/a through v1.8.1.

Affected configurations

Vulners

NVD

Node

tips_and_tricks_hq\,_peter_petreskisimple_photo_galleryRange≤1.8.1

CPENameOperatorVersion
tipsandtricks-hq:simple_photo_gallerytipsandtricks-hq simple photo galleryle1.8.1

CPE	Name	Operator	Version
tipsandtricks-hq:simple_photo_gallery	tipsandtricks-hq simple photo gallery	le	1.8.1

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "simple-photo-gallery",
    "product": "Simple Photo Gallery",
    "vendor": "Tips and Tricks HQ, Peter Petreski",
    "versions": [
      {
        "lessThanOrEqual": "v1.8.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/simple-photo-gallery/wordpress-simple-photo-gallery-plugin-v1-8-1-sql-injection?_s_id=cve

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

JSON

Related for CVE-2022-47588

prion1 nvd1 cvelist1