Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Vulnerability in Easy2map-photos WordPress Plugin v1.09 allows SQL Injection via unsanitized mapTemplateName, mapName, mapSettingsXML, parentCSSXML, photoCSSXML, mapCSSXML, mapHTML,mapID variables
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WordPress Easy2Map Photos插件SQL注入漏洞
Vulnerability Description
WordPress是WordPress基金会的一套使用PHP语言开发的博客平台。该平台支持在PHP和MySQL的服务器上架设个人博客网站。Easy2Map Photos是其中的一个用于生成地理标签照片库的插件。 WordPress Easy2Map Photos插件1.0.9及之前版本的Functions.php脚本中存在SQL注入漏洞,该漏洞源于程序在构造SQL查询语句之前没有充分过滤用户提交的输入。攻击者可利用该漏洞控制应用程序,访问或修改数据,或利用底层数据库中潜在的漏洞。
CVSS Information
N/A
Vulnerability Type
N/A