WordPress Plugin Vulnerabilities

fGallery 2.4.1 - fimrss.php SQL Injection

Description

The fgallery WordPress plugin was affected by a fimrss.php SQL Injection security vulnerability.

Affects Plugins

Plugin icon
fgallery
No known fix

References

CVE
CVE-2008-0491
Exploitdb
4993

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
f1f33c70-83fe-490a-8752-d04257f058d7

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2025-11-24
Title
ProjectList <= 0.3.0 - Authenticated (Editor+) SQL Injection via 'id' Parameter
Published
2026-06-03
Title
MasterStudy LMS Pro Plus < 4.8.21 - Authenticated (Instructor+) SQL Injection via 'columns' Parameter
Published
2018-01-01
Title
Smart Google Code Inserter <= 3.4 - Unauthenticated SQL Injection
Published
2026-03-23
Title
WP Job Portal < 2.4.9 - Unauthenticated SQL Injection via 'radius' Parameter
Published
2023-05-30
Title
Tutor LMS < 2.2.0 - Unauthenticate SQL Injection