CVE-2015-5599

Опубликовано: 18 авг. 2015

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) albumid or (2) name parameter.

Ссылки

http://packetstormsecurity.com/files/132671/WordPress-WP-PowerPlayGallery-3.3-File-Upload-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Jul/64
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/07/20/1
Exploit
Mailing List
Third Party Advisory
VDB Entry
http://www.vapid.dhs.org/advisory.php?v=132
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/132671/WordPress-WP-PowerPlayGallery-3.3-File-Upload-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Jul/64
Exploit
Mailing List
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/07/20/1
Exploit
Mailing List
Third Party Advisory
VDB Entry
http://www.vapid.dhs.org/advisory.php?v=132
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:powerplay_gallery_project:powerplay_gallery:3.3:*:*:*:*:wordpress:*:*

EPSS

Процентиль: 81%

0.01592

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-qh77-fp8q-rm39

github

больше 3 лет назад