PRODUCT PROFILE

all-in-one_video_gallery

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危CVE-2022-26332022/09/07

All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery

WordPress All-in-One Video Gallery plugin through 2.6.0 is susceptible to arbitrary file download and server-side request forgery (SSRF) via the 'dl' parameter found in the ~/public/video.php file. An attacker can download sensitive files hosted on the affected server and forge requests to the server.

all-in-one_video_galleryPoC 已收录

CVSS8.2EPSS 88.9%

高危CVE-2021-249702021/12/13

All-In-One-Gallery - Local File Inclusion

The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue

all-in-one_video_galleryPoC 已收录RCE

CVSS7.2EPSS 19.7%