medium6.5Public exploit code
CVE-2014-8375
SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL command…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin GB Gallery Slideshow - '/wp-admin/admin-ajax.php' SQL Injection2014-08-11 · webapps · php · Verified
Impact
SQL injection vulnerability in GBgallery.php in the GB Gallery Slideshow plugin 1.5 for WordPress allows remote administrators to execute arbitrary SQL commands via the selected_group parameter in a gb_ajax_get_group action to wp-admin/admin-ajax.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gb-Plugins | Gb Gallery Slideshow | Version 1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/127833/WordPress-GB-Gallery-Slideshow-1.5-SQL-Injection.html
- http://www.homelab.it/index.php/2014/08/10/wordpress-gb-gallery-slideshow
- http://www.securityfocus.com/bid/69181
- http://packetstormsecurity.com/files/127833/WordPress-GB-Gallery-Slideshow-1.5-SQL-Injection.html
- http://www.homelab.it/index.php/2014/08/10/wordpress-gb-gallery-slideshow
- http://www.securityfocus.com/bid/69181