Lucene search
PRIOn knowledge basePRION:CVE-2022-1692HistoryJun 08, 2022 - 10:15 a.m.
Sql injection
2022-06-0810:15:00
PRIOn knowledge base
www.prio-n.com
3
0.002 Low
EPSS
Percentile
59.5%
The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated users to perform an SQL injection attack
| CPE | Name | Operator | Version |
|---|---|---|---|
| cp_image_store_with_slideshow | lt | 1.0.68 |
Related
wpexploit
wpexploit
CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi
2022-05-09 00:00:00
cvelist
cvelist
CVE-2022-1692 CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi
2022-06-06 08:51:29
cve
cve
CVE-2022-1692
2022-06-08 10:15:10
wpvulndb
wpvulndb
CP Image Store with Slideshow < 1.0.68 - Unauthenticated SQLi
2022-05-09 00:00:00
cnvd
cnvd
WordPress plugin CP Image Store with Slideshow SQL Injection Vulnerability
2022-06-10 00:00:00
nvd
nvd
CVE-2022-1692
2022-06-08 10:15:10
patchstack
patchstack