Home > Content Management, SQL Injection > WordPress NextGEN Smooth Gallery Plugin “galleryID” SQLi

WordPress NextGEN Smooth Gallery Plugin “galleryID” SQLi

August 25th, 2010

Application: WordPress
Affected Version: version 1.2 and other versions.
Vendor’s URL: NextGEN Smooth Gallery Plugin
Bug Type: SQL Injection
Risk Level: Critical

Solution:
Edit the source code to ensure that input is properly sanitised.

Content Management, SQL Injection

Comments are closed.