Signature Detail

HTTP: Multiple WordPress 1 Flash Gallery Plugin Vulnerabilities

This signature detects attempts to exploit multiple known vulnerabilities in wordpress WP-Forum plugin. An attacker can steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Extended Description

1 Flash Gallery is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database. 1 Flash Gallery 0.2.5 is vulnerable; other versions may also be affected.

Affected Products

• 1 Plugin 1 Flash Gallery 0.2.5

References

• BugTraq: 46783
• URL: http://www.htbridge.ch/advisory/xss_in_1_flash_gallery_wordpress_plugin.html
• URL: http://www.htbridge.ch/advisory/sql_injection_in_1_flash_gallery_wordpress_plugin.html
• URL: http://1plugin.com/