Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via gallery_name parameter.
References
Link | Resource |
---|---|
https://wordpress.org/plugins/image-gallery-with-slideshow/ | Third Party Advisory |
http://www.vapidlabs.com/advisory.php?v=189 | Exploit Third Party Advisory |
Configurations
Information
Published : 2017-09-14 06:29
Updated : 2017-09-20 12:03
NVD link : CVE-2017-1002014
Mitre link : CVE-2017-1002014
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
anblik
- image-gallery-with-slideshow