CVE-2017-1002012

2017-09-1413:00:00

larry_cashdollar

www.cve.org

cve-2017-1002012

image gallery

sql injection

admin settings

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

76.1%

JSON

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin_setting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement.

CNA Affected

[
  {
    "product": "image-gallery-with-slideshow",
    "vendor": "Anblik",
    "versions": [
      {
        "lessThan": "1.5.2",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]