Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-5186
cve-2014-5186
sql injection
all video gallery
wordpress
remote authenticated administrators
nvd
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
44.2%
SQL injection vulnerability in the All Video Gallery (all-video-gallery) plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogallery_videos page to wp-admin/admin.php.
Affected configurations
Node
all_video_gallery_plugin_projectall-video-galleryMatch1.2wordpress
Related
prion
prion
Sql injection
2014-08-06 19:55:00
cvelist
cvelist
CVE-2014-5186
2022-10-03 16:20:42
nvd
nvd
CVE-2014-5186
2014-08-06 19:55:04
wpvulndb
wpvulndb
All Video Gallery 1.2 - SQL Injection
2014-09-24 08:08:52
patchstack
patchstack
WordPress All Video Gallery Plugin <= 1.2 - SQL Injection
2014-08-06 00:00:00
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
8.3 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
44.2%
Related for CVE-2014-5186