Sql injection

The Superb slideshow gallery plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 13.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2023-5431

CVE-2023-5431 affects the Left right image slideshow gallery WordPress plugin. The flaw is an SQL Injection via the plugin shortcode in versions

WordPress Plugin Superb slideshow gallery SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

WordPress Contest Gallery Plugin < 21.2.8.1 is vulnerable to Cross Site Scripting (XSS)

Software Contest Gallery Type Plugin Vulnerable versions 21.2.8.1 Fixed in 21.2.8.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5307 Patch priority Medium CVSS severity Medium 7.1 Developer Wasiliy Strecker PSID 79977d335b6c Credits Dmitrii...

WordPress Plugin Up down image slideshow gallery SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Plugin Photos and Files Contest Gallery Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

CVE-2023-5583

The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.34 via deserialization of untrusted input from the 'wpsimplegallerygallery' post meta via 'wpsgallery' shortcode. This allows authenticated attackers, with contributor-level...

WordPress Up down image slideshow gallery Plugin <= 12.0 is vulnerable to SQL Injection

Software Up down image slideshow gallery Type Plugin Vulnerable versions = 12.0 Fixed in 12.1 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-5435 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 963fa79c0569 Credits István Márton Required privilege...

WordPress Superb slideshow gallery Plugin <= 13.1 is vulnerable to SQL Injection

Software Superb slideshow gallery Type Plugin Vulnerable versions = 13.1 Fixed in 13.2 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-5434 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 2f0f3b992f7b Credits István Márton Required privilege Contributo...

PT-2023-32195 · WordPress · Wp Simple Galleries

Name of the Vulnerable Software and Affected Versions: WP Simple Galleries plugin for WordPress versions up to, and including, 1.34 Description: The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection via deserialization of untrusted input from the wpsimplegallery galle...

The vulnerability in the admin-ajax.php script of the Photo Gallery administration panel of the WordPress content management system allows a hacker to execute arbitrary SQL code.

The vulnerability in the admin-ajax.php script of the Photo Gallery administration panel of the WordPress content management system is related to the failure to protect the SQL query structure during the processing of the bwgtagidbwgthumbnails0 parameter. Exploiting this vulnerability allows an...

CVE-2023-44377

The connected PT-2023-29213 entry describes an unauthenticated SQL injection in Online Art Gallery version 1.0, caused by lack of input validation in the add3 parameter of header.php. This could allow arbitrary database queries if exploited. The recommended workaround is to restrict or avoid usin...

CVE-2023-44376

The connected PT-2023-29212 entry details an unauthenticated SQL Injection in Online Art Gallery version 1.0, specifically in the header.php resource via the add2 parameter which is not validated before a database write. Impact is typical SQLi risk allowing arbitrary queries if exploited; exploit...

CVE-2023-44375

CVE-2023-44375 entry is rejected and does not represent an active vulnerability entry.

CVE-2023-44162

CVE-2023-44162 is rejected/not used; this entry does not represent an active vulnerability.

CVE-2023-43738

CVE-2023-43738 is rejected/not used and does not represent an active vulnerability entry.

Number withdrawn

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. This CVE number has been withdrawn...

PT-2023-29213 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the add3 parameter of the header.php resource does not validate the characters received, and they are sent...

Number withdrawn

Projectworlds Online Art gallery project is an online art gallery project by Projectworlds India. This CVE number has been withdrawn...

PT-2023-29212 · Unknown · Online Art Gallery

Name of the Vulnerable Software and Affected Versions: Online Art Gallery version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the add2 parameter of the header.php resource does not validate the characters received and they are sent...