CVE-2013-3478

HIGH 7.5 CVSS 2.0

Published: March 5, 2014
Last modified: June 16, 2026
NVD status: Modified
Reported by: PSIRT-CNA@flexerasoftware.com
Weakness: CWE-89
CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php.

Affected products and versions

n/a n/a — Versions not specified
apptha video_gallery_plugin — Version 1.6
apptha video_gallery_plugin — Version 2.0

References

secunia.com http://secunia.com/advisories/51344 Permissions Required, Vendor Advisory
www.securityfocus.com http://www.securityfocus.com/bid/59845 Third Party Advisory
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/84239
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References