CVE-2019-14313

A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php...

PT-2019-13601 · 10Web · 10Web Photo Gallery

Name of the Vulnerable Software and Affected Versions: 10Web Photo Gallery plugin versions prior to 1.5.31 Description: A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via the filemanager/model.php. Recommendations: For versions...