Description
Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/import_run.php&type=externalAssessment&step=4 URI.
Remediation
References
Related Vulnerabilities
PHP Integer Overflow or Wraparound Vulnerability (CVE-2018-14883)
WordPress Plugin Duplicate Page SQL Injection (3.3)
WordPress Plugin Images Slideshow by 2J-Image Slider Security Bypass (1.3.31)
WordPress Plugin Wise Agent Lead Capture Forms Cross-Site Scripting (1.0)
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6613)