PT-2023-10154 · Unknown · Gimmie Plugin
CVE-2014-125086
·
Publicado
2023-02-06
·
Atualizado
2024-05-17
CVSS v2.0
5.2
Média
| Vetor | AV:A/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Gimmie Plugin version 1.2.2
Description
A critical issue has been found in the Gimmie Plugin, affecting an unknown functionality of the file trigger login.php. The manipulation of the
userid argument leads to sql injection. Upgrading to version 1.3.0 addresses this issue.Recommendations
For Gimmie Plugin version 1.2.2, upgrade to version 1.3.0 to resolve the issue. As a temporary workaround, consider restricting the manipulation of the
userid argument in the trigger login.php file until the upgrade is applied.Correção
SQL injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gimmie Plugin