What is CVE-2013-3478?

CVE-2013-3478 is a vulnerability in Apptha Video Gallery Plugin, classified under SQL Injection. Published 2014-03-05.

Is CVE-2013-3478 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Apptha Video Gallery Plugin

CVE-2013-3478

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php.

Vulnerability class: SQL Injection

EPSS: 0.022 (80.4th percentile) — read the EPSS interpretation.

Affected products

Apptha Video_gallery_plugin — versions 1.6, 2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

20142995/nuclei-templates

References

PSIRT-CNA@flexerasoftware.com (Third Party Advisory, vdb-entry, x_refsource_BID)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
PSIRT-CNA@flexerasoftware.com (Permissions Required, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2013-3478?: CVE-2013-3478 is a vulnerability in Apptha Video Gallery Plugin, classified under SQL Injection. Published 2014-03-05.
Is CVE-2013-3478 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.