Summary
The host is installed with Wordpress
Photo Gallery plugin and is prone to blind sql injection vulnerability.
Impact
Successful exploitation will allow remote
attackers to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.
Impact Level: Application
Solution
Update to version 1.2.8 or later,
For updates refer to https://wordpress.org/plugins/photo-gallery
Insight
Flaw is due to the wp-admin/admin-ajax.php
script not properly sanitizing user-supplied input to the 'order_by' parameter.
Affected
Wordpress Photo Gallery plugin version
1.2.7, other versions may also be affected.
Detection
Send a crafted request via HTTP GET and
check whether it is able to execute sql query or not.
References
Severity
Classification
-
CVE CVE-2015-1055 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities