A SQL injection vulnerability exists in the 10Web Photo Gallery plugin prior to 1.5.31 for WordPress. Successful exploitation of this vulnerability would allow a remote malicious user to execute arbitrary SQL commands on the affected system via filemanager/model.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
10web photo gallery |