CVEs-PoC/2016/CVE-2016-10940.md

CVE-2016-10940

Description

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.

POC

Reference

• http://lenonleite.com.br/en/2016/12/16/zm-gallery-1-plugin-wordpress-blind-injection/
• http://lenonleite.com.br/en/2016/12/16/zm-gallery-1-plugin-wordpress-blind-injection/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates