CVE-2016-11018

CRITICAL

Huge-IT Image Gallery < 1.9.0 - Unauthenticated SQL Injection via Client-Ip and X-Forwarded-For Headers

Title source: llm
STIX 2.1

Description

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback().

References (3)

Core 3
Core References
Release Notes, Third Party Advisory x_refsource_misc
https://plugins.trac.wordpress.org/browser/gallery-images/tags/1.8.9
Release Notes, Third Party Advisory x_refsource_misc
https://plugins.trac.wordpress.org/browser/gallery-images/tags/1.9.0
Exploit, Third Party Advisory x_refsource_misc
http://10degres.net/cve-2016-11018-image-gallery-sql-injection/

Scores

CVSS v3 9.8
EPSS 0.0242
EPSS Percentile 82.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
huge-it/image_gallery < 1.9.0
Published Jan 21, 2020
Tracked Since Feb 18, 2026