Sql injection

2019-07-3018:15:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

62.2%

JSON

A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php.

CPENameOperatorVersion
photo_gallerylt1.5.31

CPE	Name	Operator	Version
	photo_gallery	lt	1.5.31

References

fortiguard.com/zeroday/FG-VD-19-101

plugins.trac.wordpress.org/changeset/2128378

wordpress.org/plugins/photo-gallery/

wpvulndb.com/vulnerabilities/9480

0.002 Low

EPSS

Percentile

62.2%

JSON

Related for PRION:CVE-2019-14313