CVE-2022-4166

Опубликовано: 26 дек. 2022

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the addCountS POST parameter before concatenating it to an SQL query in 4_activate.php. This may allow malicious users with at least author privilege to leak sensitive information from the site's database.

Ссылки

https://bulletin.iese.de/post/contest-gallery_19-1-4-1_12
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/6e7de2bb-5f71-4c27-ae79-4f6b2ba7f86f
Exploit
Third Party Advisory
https://bulletin.iese.de/post/contest-gallery_19-1-4-1_12
Exploit
Third Party Advisory
https://wpscan.com/vulnerability/6e7de2bb-5f71-4c27-ae79-4f6b2ba7f86f
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:contest-gallery:contest_gallery:*:*:*:*:*:wordpress:*:*

Версия до 19.1.5.1 (исключая)

cpe:2.3:a:contest-gallery:contest_gallery:*:*:*:*:pro:wordpress:*:*

Версия до 19.1.5.1 (исключая)

EPSS

Процентиль: 72%

0.00741

Низкий

6.5 Medium

CVSS3

Дефекты

Связанные уязвимости

GHSA-7hx6-3mh5-45rj