.. / CVE-2016-10940

• SQLi
• Nuclei
• Web

Exploit for WordPress zm-gallery plugin 1.0 SQL Injection (CVE-2016-10940)

Description:

zm-gallery plugin 1.0 for WordPress is susceptible to SQL injection via the order parameter.

Nuclei Template

View the template here CVE-2016-10940.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2016/CVE-2016-10940.yaml

References: