Read the docs

Anblik

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Anblik records in CISA KEV

No Anblik vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Image-gallery-with-slideshow 5 records MEDIUM

Records

5 records

TI-2017-14737 CVE-2017-1002012 · GHSA-8wgg-xcqq-fcc6

SQL injection in Anblik image-gallery-with-slideshow

Priority MEDIUM 48

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin_setting.php the following snippet of code does not sanitize input via the gid variable before passing it into a…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03435 Published 2017-09-14 Fixed in 1.5.2 CWE-89
TI-2017-14740 CVE-2017-1002015 · GHSA-f7r6-h92h-m93g

SQL injection in Anblik image-gallery-with-slideshow

Priority MEDIUM 47

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via selectMulGallery parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02907 Published 2017-09-14 Fixed in 1.5.2 CWE-89
TI-2017-14739 CVE-2017-1002014 · GHSA-5p8f-x295-j464

SQL injection in Anblik image-gallery-with-slideshow

Priority MEDIUM 47

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via gallery_name parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02907 Published 2017-09-14 Fixed in 1.5.2 CWE-89
TI-2017-14738 CVE-2017-1002013 · GHSA-cpr3-c9p9-9p8v

SQL injection in Anblik image-gallery-with-slideshow

Priority MEDIUM 47

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/admin_setting.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02907 Published 2017-09-14 Fixed in 1.5.2 CWE-89
TI-2017-14736 CVE-2017-1002011 · GHSA-7x7r-fcfg-xc97

Cross-site scripting in Anblik image-gallery-with-slideshow

Priority LOW 26

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value->gallery_name and $value->gallery_description where anyone with privileges to modify or add galler…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00981 Published 2017-09-14 Fixed in 1.5.2 CWE-79
Open these records in search →