CVE-2016-1000124

Critical

Published: 06/10/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Huge-IT Portfolio Gallery plugin version 1.0.6 contains a vulnerability to unauthenticated SQL Injection, allowing attackers to manipulate database queries.

Risk Assessment

This vulnerability may lead to unauthorized access to database information, posing a serious threat to the organization's information security.

Recommendation

It is recommended to update the plugin to the latest version to mitigate this vulnerability and conduct a security audit of the database.

Original NVD description (English source)

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6