CVE-2015-4066

概要

参考情報

• packetstormsecurity.com/files/132036/WordPress-GigPress-2.3.8-SQL-Injection.html · Exploit
• securityfocus.com/bid/74747
• wordpress.org/plugins/gigpress/changelog · Patch
• exploit-db.com/exploits/37109 · Exploit

gigpress のその他の脆弱性

• CVE-2023-7233中 4.8The GigPress WordPress plugin through 2.3.29 does not sanitise and escape some of its settings, which could allow high privilege users such …
• CVE-2023-0381高 8.8The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statemen…
• CVE-2022-4759中 5.4The GigPress WordPress plugin before 2.3.28 does not validate and escape some of its shortcode attributes before outputting them back in a p…
• CVE-2015-9354中 4.8The gigpress plugin before 2.3.11 for WordPress has XSS.
• CVE-2015-9353高 7.2The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066.