Back to Database
Status published
Medium
CVE-2014-7153
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in...
Vulnerability Description
SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-7153
Credits & Attribution
No credits recorded in the NVD database.
References
More from huge-it
View All →CVE-2016-11018
An issue was discovered in the Huge-IT gallery-images plugin before...
Critical
9.8
CVE-2016-1000125
Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla...
Critical
9.8
CVE-2016-1000124
Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...
Critical
9.8
CVE-2016-1000123
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...
Critical
9.8
CVE-2016-1000122
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
High
7.2
Affected Vendor
huge-it
View all reports →Affected Software
image gallery
Vulnerable Versions:
1.0.1
Timeline
Official Publish:
September 22nd, 2014
Last Modified:
September 17th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.