Skip to main content

Apptha Slider Gallery

2 CVEs product

Monthly

CVE-2017-20249 Jun 09, 11:48 HIGH POC This Week

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Apptha Slider Gallery Apptha
NVD Exploit-DB
CVSS 4.0
8.8
EPSS
0.1%
CVE-2017-20248 Jun 09, 11:48 HIGH POC This Week

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Apptha Slider Gallery Apptha
NVD Exploit-DB
CVSS 4.0
8.7
EPSS
0.3%
EPSS 0% CVSS 8.8
HIGH POC This Week

Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Apptha Slider Gallery Apptha
NVD Exploit-DB
EPSS 0% CVSS 8.7
HIGH POC This Week

Apptha Slider Gallery 1.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files by manipulating the imgname parameter. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Apptha Slider Gallery +1
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy