Vulnerabilities > CVE-2023-0381 - Unspecified vulnerability in TRI Gigpress

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

tri

NVD

Published: 2023-02-27

Updated: 2023-11-07

Summary

The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQL Injection attacks

Vulnerable Configurations

Part	Description	Count
Application	Tri TRI Gigpress 1.0 TRI Gigpress 1.1 TRI Gigpress 1.1.1 TRI Gigpress 1.2 TRI Gigpress 1.2.1 TRI Gigpress 1.2.2 TRI Gigpress 1.2.6 TRI Gigpress 1.2.7 TRI Gigpress 1.3 TRI Gigpress 1.3.1 TRI Gigpress 1.3.2 TRI Gigpress 1.3.3 TRI Gigpress 1.3.4 TRI Gigpress 1.4 TRI Gigpress 1.4.1 TRI Gigpress 1.4.2 TRI Gigpress 1.4.4 TRI Gigpress 1.4.5 TRI Gigpress 1.4.6 TRI Gigpress 1.4.7 TRI Gigpress 1.4.8 TRI Gigpress 1.4.9 TRI Gigpress 2.0 TRI Gigpress 2.0.1 TRI Gigpress 2.0.2 TRI Gigpress 2.0.3 TRI Gigpress 2.1 TRI Gigpress 2.1.1 TRI Gigpress 2.1.2 TRI Gigpress 2.1.3 TRI Gigpress 2.1.4 TRI Gigpress 2.1.5 TRI Gigpress 2.1.6 TRI Gigpress 2.1.7 TRI Gigpress 2.1.8 TRI Gigpress 2.1.9 TRI Gigpress 2.1.9.1 TRI Gigpress 2.1.10 TRI Gigpress 2.1.11 TRI Gigpress 2.1.12 TRI Gigpress 2.1.13 TRI Gigpress 2.1.14 TRI Gigpress 2.1.15 TRI Gigpress 2.2 TRI Gigpress 2.2.1 TRI Gigpress 2.2.2 TRI Gigpress 2.2.3 TRI Gigpress 2.2.4 TRI Gigpress 2.2.5 TRI Gigpress 2.2.6 TRI Gigpress 2.2.7 TRI Gigpress 2.2.8 TRI Gigpress 2.2.9 TRI Gigpress 2.2.9.1 TRI Gigpress 2.2.9.2 TRI Gigpress 2.2.9.3 TRI Gigpress 2.3 TRI Gigpress 2.3.1 TRI Gigpress 2.3.2 TRI Gigpress 2.3.3 TRI Gigpress 2.3.4 TRI Gigpress 2.3.5 TRI Gigpress 2.3.6 TRI Gigpress 2.3.7 TRI Gigpress 2.3.8 TRI Gigpress 2.3.9 TRI Gigpress 2.3.10 TRI Gigpress 2.3.11 TRI Gigpress 2.3.12 TRI Gigpress 2.3.13 TRI Gigpress 2.3.14 TRI Gigpress 2.3.15 TRI Gigpress 2.3.16 TRI Gigpress 2.3.17 TRI Gigpress 2.3.18 TRI Gigpress 2.3.19 TRI Gigpress 2.3.20 TRI Gigpress 2.3.21 TRI Gigpress 2.3.22 TRI Gigpress 2.3.23 TRI Gigpress 2.3.24 TRI Gigpress 2.3.25 TRI Gigpress 2.3.25.1	83

References

https://wpscan.com/vulnerability/39c964fa-6d8d-404d-ac38-72f6f88d203c