Lucene search
PRIOn knowledge basePRION:CVE-2021-24915HistoryNov 29, 2021 - 9:15 a.m.
Sql injection
2021-11-2909:15:00
PRIOn knowledge base
www.prio-n.com
1
The Contest Gallery WordPress plugin before 13.1.0.6 does not have capability checks and does not sanitise or escape the cg-search-user-name-original parameter before using it in a SQL statement when exporting users from a gallery, which could allow unauthenticated to perform SQL injections attacks, as well as get the list of all users registered on the blog, including their username and email address
| CPE | Name | Operator | Version |
|---|---|---|---|
| contest_gallery | lt | 13.1.0.6 |
Related
cvelist
cvelist
nvd
nvd
CVE-2021-24915
2021-11-29 09:15:07
wpvulndb
wpvulndb
wpexploit
wpexploit
cnvd
cnvd
WordPress Contest Gallery SQL Injection Vulnerability
2021-12-01 00:00:00
nuclei
nuclei
Contest Gallery < 13.1.0.6 - SQL injection
2023-10-17 07:20:28
cve
cve
CVE-2021-24915
2021-11-29 09:15:07