Slider by 10Web <= 1.2.35 - SQL Injection

2020-09-29 00:00
Nguyen Anh Tien

Strategic Overview

Status
Patched in 1.2.36
Affected Version<= 1.2.35
CVSS8.8High
CVECVE-2021-24132
View all Slider by 10Web – Responsive Image Slider vulnerabilities

Vulnerability Overview

The Slider by 10Web WordPress plugin, versions before 1.2.36, in the bulk_action, export_full and save_slider_db functionalities of the plugin were vulnerable, allowing a high privileged user (Admin), or medium one such as Contributor+ (if "Role Options" is turn on for other users) to perform a SQL Injection attacks.

Technical Analysis

REMEDIATION: Update to version 1.2.36, or a newer patched version --- IDENTIFIER: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')) The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

External References

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C