cve/2017/CVE-2017-1002028.md

CVE-2017-1002028

Description

Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query.

POC

Reference

• https://wpvulndb.com/vulnerabilities/8888

Github

• https://github.com/ARPSyndicate/cvemon