CVEvulnerability
CVE-2015-5599
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-08-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in upload.php in the Powerplay Gallery plugin 3.3 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) albumid or (2) name parameter.
Affected configurations
• powerplay gallery project powerplay gallery 3.3
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.com/files/132671/WordPress-WP-PowerPlayGallery-3.3-File-Upload-SQL-Injection.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2015/Jul/64 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/07/20/1 Exploit, Mailing List, Third Party Advisory, VDB Entry
- http://www.vapid.dhs.org/advisory.php?v=132 Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/132671/WordPress-WP-PowerPlayGallery-3.3-File-Upload-SQL-Injection.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2015/Jul/64 Exploit, Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2015/07/20/1 Exploit, Mailing List, Third Party Advisory, VDB Entry
- http://www.vapid.dhs.org/advisory.php?v=132 Exploit, Third Party Advisory