⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2014-5201

HIGH · 7.5 CVSS Gepubliceerd: 12-08-2014 CWE-89

Beschrijving

SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a go_view_object action to wp-admin/admin-ajax.php.

Vendors

Gallery Objects Project

Affected products

Gallery Objects

References

packetstormsecurity.com
www.homelab.it
www.securityfocus.com