← voltar
CVE-2021-24139exploração observadaCWE-89

Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection

40Vexday Risk Score

Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.

ssvc Actepss 5.4%
da publicação à arma
Publicada no NVD18 de mar.
VulnCheck+677d
probabilidade de exploração
5.4%top 8% das CVEs
exploração observada
simVulnCheck
Unvalidated input in the Photo Gallery (10Web Photo Gallery) WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwg_search_x parameter.