WP Easy Gallery – WordPress Gallery Plugin, 578e9c75aa771ef9002fc14ddc07eb2825d68687
- CVE, Research URL
- Application
- Published on
- Feb 18, 2013
- Research Description
- WP Easy Gallery – WordPress Gallery Plugin [wp-easy-gallery] < 2.7.1 (closed) WP Easy Gallery <= 2.7 - SQL Injection The WP Easy Gallery plugin for WordPress is vulnerable to generic SQL Injection via the 'galleryId' or 'select_gallery' parameters found in the ‘admin/edit-gallery.php’ file in versions up to, and including, 2.7 due to insufficient escaping on the user-supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated admin+ attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
- Affected versions
-
max 2.7.1.
- Status
-
vulnerable