CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
Apptha Slider Gallery 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the albid parameter. Attackers can send GET requests with crafted SQL payloads in the albid parameter to extract sensitive database information including user credentials and authentication hashes.
Explanation of Vulnerability in Simple Terms
Apptha Slider Gallery contains a SQL injection vulnerability in its database query handling. An attacker on the network can inject malicious SQL commands without authentication or user interaction. This allows reading sensitive data from the site's database, including user credentials and configuration details. Update to a patched version when available.
What an attacker can do
Read or extract data from the site's database, including user information and site configuration.
Potential impact on your site
Attackers can access sensitive database records, user accounts, and site configuration without logging in.
Conditions required to exploit
Network access only; no authentication or user action required.
Key dates
External resources
Related vulnerabilities
