EUVD-2013-3413

Malware in sbrugna...

Sql injection

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...

CVE-2015-2065

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...

CVE-2015-2065

CVE-2015-2065 is a SQL injection vulnerability in the Apptha WordPress Video Gallery (contus-video-gallery) plugin for WordPress, affecting versions before 2.8. The flaw allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php. The...

CVE-2015-2065: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...

PT-2015-5578

Name of the Vulnerable Software and Affected Versions Apptha WordPress Video Gallery contus-video-gallery plugin versions prior to 2.8 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the vid parameter in a 'rss' action to the...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to 1...

Sql injection

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow 1 remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to wp-admin/admin-ajax.php ...

CVE-2014-9098

Multiple cross-site scripting XSS vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to 1...

PT-2014-8825

Name of the Vulnerable Software and Affected Versions Apptha WordPress Video Gallery contus-video-gallery plugin version 2.5 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to API endpoints such as...

PT-2014-8824

Name of the Vulnerable Software and Affected Versions Apptha WordPress Video Gallery contus-video-gallery plugin version 2.5 Description The issue concerns SQL injection vulnerabilities in the Apptha WordPress Video Gallery plugin. These vulnerabilities allow remote attackers to execute arbitrary...

CVE-2014-9097: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow 1 remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to wp-admin/admin-ajax.php ...

CVE-2014-9098: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to 1...

Sql injection

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php...

CVE-2013-3478

Apptha WordPress Video Gallery plugin (WordPress, versions 2.0, 1.6 and earlier) is affected by a SQL injection in the playid parameter of index.php. The underlying issue allows remote attackers to execute arbitrary SQL commands. Reported CVE-2013-3478 details are corroborated by multiple sources...

CVE-2013-3478: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php...

PT-2014-2680

Name of the Vulnerable Software and Affected Versions Apptha WordPress Video Gallery versions 2.0, 1.6, and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the playid parameter to "index.php". Recommendations For Apptha WordPress Video...