CVE-2015-4066

Description

References

• packetstormsecurity.com/files/132036/WordPress-GigPress-2.3.8-SQL-Injection.html · Exploit
• securityfocus.com/bid/74747
• wordpress.org/plugins/gigpress/changelog · Patch
• exploit-db.com/exploits/37109 · Exploit

Más vulnerabilidades de gigpress

• CVE-2023-7233MEDIO 4.8The GigPress WordPress plugin through 2.3.29 does not sanitise and escape some of its settings, which could allow high privilege users such …
• CVE-2023-0381ALTO 8.8The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statemen…
• CVE-2022-4759MEDIO 5.4The GigPress WordPress plugin before 2.3.28 does not validate and escape some of its shortcode attributes before outputting them back in a p…
• CVE-2015-9354MEDIO 4.8The gigpress plugin before 2.3.11 for WordPress has XSS.
• CVE-2015-9353ALTO 7.2The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.