Sql injection

2017-09-1413:29:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.4%

JSON

Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query.

CPENameOperatorVersion
gallery-transformationeq1.0

CPE	Name	Operator	Version
	gallery-transformation	eq	1.0

References

www.vapidlabs.com/advisory.php?v=199

wordpress.org/plugins/wordpress-gallery-transformation/

wpvulndb.com/vulnerabilities/8888