cve/2019/CVE-2019-16119.md

CVE-2019-16119

Description

SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter.

POC

Reference

• http://packetstormsecurity.com/files/154432/WordPress-Photo-Gallery-1.5.34-SQL-Injection.html
• https://wpvulndb.com/vulnerabilities/9872

Github

• https://github.com/20142995/nuclei-templates
• https://github.com/El-Palomo/EVM1