CVE-2018-18019

概要

参考情報

• ansawaf.blogspot.com/2019/04/xss-and-sqli-in-slideshow-gallery.html · Exploit
• docs.google.com/document/d/1rwN4hJkD5TJfCa16rsGwzYhzL-ODd2VLkFnPvAIq4Ys/edit · Permissions Required

slideshow gallery のその他の脆弱性

• CVE-2024-31353中 5.3Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a…
• CVE-2023-28491高 7.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery LITE.This …
• CVE-2023-28497高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions.
• CVE-2021-24882中 4.8The Slideshow Gallery WordPress plugin before 1.7.4 does not sanitise and escape the Slide "Title", "Description", and Gallery "Title" field…
• CVE-2018-18018緊急 9.8SQL Injection exists in the Tribulant Slideshow Gallery plugin 1.6.8 for WordPress via the wp-admin/admin.php?page=slideshow-galleries&metho…