CVEvulnerability
CVE-2013-3478
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-03-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php.
Affected configurations
• apptha video gallery plugin 1.6
• apptha video gallery plugin 2.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/51344 Permissions Required, Vendor Advisory
- http://www.securityfocus.com/bid/59845 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84239 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/51344 Permissions Required, Vendor Advisory
- http://www.securityfocus.com/bid/59845 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/84239 exchange.xforce.ibmcloud.com