Lucene search
PRIOn knowledge basePRION:CVE-2018-6195HistoryJan 30, 2018 - 8:29 p.m.
Design/Logic Flaw
2018-01-3020:29:00
PRIOn knowledge base
www.prio-n.com
2
admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator, editor, or author) remote attackers to conduct PHP Object Injection attacks via crafted serialized data in the ‘session’ HTTP GET parameter to wp-admin/upload.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| splashing_images | lt | 2.1.1 |
Related
nvd
nvd
CVE-2018-6195
2018-01-30 20:29:00
wpvulndb
wpvulndb
Splashing Images <= 2.1 - Authenticated PHP Object Injection
2018-01-26 00:00:00
patchstack
patchstack
cvelist
cvelist
CVE-2018-6195
2018-01-30 20:00:00
cve
cve
CVE-2018-6195
2018-01-30 20:29:00
packetstorm
packetstorm
WordPress Splashing Images 2.1 Cross Site Scripting / PHP Object Injection
2018-01-26 00:00:00