PT-2023-10169 · WordPress · Portfolio Gallery Plugin

CVE-2014-125101 · Publicado 2023-05-28 · Atualizado 2024-05-17

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Portfolio Gallery Plugin versions up to 1.1.8

Description A critical vulnerability has been found in the Portfolio Gallery Plugin on WordPress, affecting an unknown part. The manipulation leads to sql injection and can be initiated remotely.

Recommendations For Portfolio Gallery Plugin versions up to 1.1.8, upgrade to version 1.1.9 to address this issue.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2014-125101

Produtos afetados

Portfolio Gallery Plugin

Referências · 8

• https://github.com/wp-plugins/portfolio-gallery/commit/58ed88243e17df766036f4857041edaf358076d3 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-125101 · Nota
• https://vuldb.com/?id.230085 · Nota
• https://t.me/cibsecurity/64748 · Publicação no Telegram
• https://t.me/cvenotify/51305 · Publicação no Telegram
• https://t.me/cvenotify/63040 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2014-125101 · Nota de Segurança
• https://vuldb.com/?ctiid.230085 · Nota