Lucene search
HistorySep 22, 2014 - 2:55 p.m.
CVE-2014-7153
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.001
Percentile
48.0%
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php.
Affected configurations
Node
huge-itimage_galleryMatch1.0.1wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huge-it | image_gallery | 1.0.1 | cpe:2.3:a:huge-it:image_gallery:1.0.1:*:*:*:*:wordpress:*:* |
Related
patchstack
patchstack
WordPress Huge IT Image Gallery Plugin 1.0.1 - Authenticated SQL Injection
2014-09-02 00:00:00
wpvulndb
wpvulndb
Huge IT Image Gallery 1.0.1 - SQL Injection
2014-10-11 19:57:37
cve
cve
CVE-2014-7153
2014-09-22 14:55:02
cvelist
cvelist
CVE-2014-7153
2014-09-22 14:00:00
prion
prion
Sql injection
2014-09-22 14:55:00
exploitdb
exploitdb
WordPress Plugin Huge-IT Image Gallery 1.0.1 - (Authenticated) SQL Injection
2014-09-02 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8
Confidence
Low
EPSS
0.001
Percentile
48.0%
Related for NVD:CVE-2014-7153