Sql injection

SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the ascordesc parameter in a create gallery request in the galleriesbwg page to wp-admin/admin.php...

CVE-2015-1393: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Photo Gallery plugin before 1.2.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the ascordesc parameter in a create gallery request in the galleriesbwg page to wp-admin/admin.php...

WordPress Plugin Photo Gallery 'asc_or_desc' Parameter SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin Photo Gallery 'ascordesc' Parameter due to the program failing t...

WordPress Photo Gallery plugin <= 1.2.100 - SQL Injection

Because of this vulnerability, authenticated users can execute arbitrary SQL commands via "the ascordesc" parameter in the galleriesbwg page to wp-admin/admin.php. Solution Upgrade the plugin...