2 matches found
Sql injection
A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php...
10CVSS9.8AI score0.04482EPSS
SaveExploits0References4Affected Software1
CVE-2019-14313: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the 10Web Photo Gallery plugin before 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via filemanager/model.php...
10CVSS6.5AI score0.04482EPSS
SaveExploits0References2
20