CVE-2021-24139

CRITICALNuclei

Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-24139 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

Unvalidated input in the Photo Gallery (10Web Photo Gallery) WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwg_search_x parameter.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 24, 2023 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

2
ProductSourceVersion range

photo_gallery

Browse 10web / photo_gallery
VulnCheckVersion data not supplied

Photo Gallery by 10Web

CVE List1.5.55 to < 1.5.55affected

Nuclei templates

1
ProjectDiscoveryCRITICAL10Web Photo Gallery < 1.5.55 - SQL InjectionCVSS 9.8

WordPress plugin 10Web Photo Gallery versions before 1.5.55 contains a SQL injection caused by unvalidated input in the 'bwg_search_x' parameter in frontend/models/model.php, letting attackers execute arbitrary SQL commands, exploit requires attacker to control the 'bwg_search_x' parameter.

Impact

Attackers can execute arbitrary SQL commands, potentially leading to data theft, data tampering, or full database compromise.

Remediation

Update to version 1.5.55 or later.

WeaknessesCWE-89
Authorsriteshs4hu
Template tagscvecve2021wpwp-pluginsqliphoto-gallery10webvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:10web:photo_gallery:*:*:*:*:*:wordpress:*:*
https://wpscan.com/vulnerability/2e33088e-7b93-44af-aa6a-e5d924f86e28 https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/photo-gallery/photo-gallery-by-10web-1554-sql-injection-via-bwg-search-x-parameter https://nvd.nist.gov/vuln/detail/CVE-2021-24139

Source: ProjectDiscovery

References

2