Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/08 12:00 a.m.•1 views

CVE-2015-2062: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Huge-IT Slider slider-image plugin before 2.7.0 for WordPress allow remote administrators to execute arbitrary SQL commands via the removeslide parameter in a popupposts or editcat action in the slidershugeitslider page to wp-admin/admin.php...

7.2CVSS7.7AI score0.02446EPSS
SaveExploits3References2
NVD
NVD
•added 2014/09/22 2:55 p.m.•29 views

CVE-2014-7153

SQL injection vulnerability in the editgallery function in admin/galleryfunc.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php...

6.5CVSS8AI score0.02293EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/22 12:00 a.m.•2 views

CVE-2014-7153: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the editgallery function in admin/galleryfunc.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php...

6.5CVSS6.4AI score0.02293EPSS
SaveExploits2References2
Rows per page
Query Builder