critical9.8
CVE-2017-1002028
Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter…
Impact
Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Angrybyte | Gallery-Transformation | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.vapidlabs.com/advisory.php?v=199
- https://wordpress.org/plugins/wordpress-gallery-transformation/
- https://wpvulndb.com/vulnerabilities/8888
- http://www.vapidlabs.com/advisory.php?v=199
- https://wordpress.org/plugins/wordpress-gallery-transformation/
- https://wpvulndb.com/vulnerabilities/8888