Lucene search
HistoryAug 12, 2014 - 8:55 p.m.
CVE-2014-5201
cve-2014-5201
sql injection
gallery objects
wordpress
vulnerability
nvd
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
39.7%
SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a go_view_object action to wp-admin/admin-ajax.php.
Affected configurations
Node
gallery_objects_projectgallery_objectsMatch0.4---wordpress
| CPE | Name | Operator | Version |
|---|---|---|---|
| gallery_objects_project:gallery_objects | gallery objects project gallery objects | eq | 0.4 |
Related
prion
prion
Sql injection
2014-08-12 20:55:00
patchstack
patchstack
WordPress Gallery Objects Plugin 0.4 - SQL Injection
2014-07-18 00:00:00
cvelist
cvelist
CVE-2014-5201
2014-08-12 20:00:00
nvd
nvd
CVE-2014-5201
2014-08-12 20:55:04
wpvulndb
wpvulndb
Gallery Objects <= 0.4 - SQL Injection
2014-09-19 12:10:01
8.8 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
39.7%
Related for CVE-2014-5201