Description

SQL injection vulnerability in fim_rss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter.

Remediation

References

CVE-2008-0491

Related Vulnerabilities

Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-40898)

WordPress Plugin Download Monitor Information Disclosure (1.6.3)

WordPress Plugin Chained Quiz Cross-Site Scripting (1.1.9)

WordPress Plugin PowerPress Podcasting by Blubrry Cross-Site Scripting (6.0)

PHP Improper Input Validation Vulnerability (CVE-2011-1398)

Severity

High

Classification

CVE-2008-0491 CWE-138

Tags

Missing Update Known Vulnerabilities