CVE-2017-1002028

Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query...

lunastage.org XSS vulnerability

Open Bug Bounty ID: OBB-295764 Description| Value ---|--- Affected Website:| lunastage.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mediafab.ch XSS vulnerability

Vulnerable URL: https://www.mediafab.ch/gallery.php?mode=gallery=136=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...

migrantwatch.in XSS vulnerability

Vulnerable URL: http://www.migrantwatch.in/gallery.php?location=4278%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E%3Cimg%20src=%22https://images.cooltext.com/4956678.gif%22%20width=%22166%22%20height=%2270%22%20alt=%22m0ns7er%22%20/%3E Details:...

kmml.com XSS vulnerability

Vulnerable URL: https://www.kmml.com/php/gallery.php?photocatid=6id=141="'--!=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 07.08.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1422920 VIP website status:| No Check kmml.com SSL...

mypets.co.kr XSS vulnerability

Vulnerable URL: http://mypets.co.kr/gallery.php?id='-- Details: Description| Value ---|--- Patched:| Yes, at 25.11.2017 Latest check for patch:| 25.11.2017 19:54 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Che...

manasstudycentre.com XSS vulnerability

Open Bug Bounty ID: OBB-207497 Description| Value ---|--- Affected Website:| manasstudycentre.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

evanscartoons.com XSS vulnerability

Vulnerable URL: http://www.evanscartoons.com/gallery.php/"--!"' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16566110 VIP website status:| No Check evanscartoons.com SSL...

ormsbyhome.com XSS vulnerability

Vulnerable URL: http://ormsbyhome.com/gallery.php?cid=8"%27--!" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16147500 VIP website status:| No Check ormsbyhome.com SSL connection:| Grade: B+ Coordinated...

pts.lv XSS vulnerability

Vulnerable URL: http://www.pts.lv/gallery.php?cat=2"=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check pts.lv SSL connection:|...

digitalbook.it XSS vulnerability

Vulnerable URL: http://www.digitalbook.it/gallery.php?gid=31%22%3E%3C/title%3E%27%3E;%3C/script%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

MSCorp CMS gallery.php parameter id SQL injection vulnerability

No description provided by source...

tidytowns.ie XSS vulnerability

Vulnerable URL: http://www.tidytowns.ie/gallery.php?page=2" Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 15:55 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1877604 Google Pagerank| 5 VIP website status:|...

galleries.girlnextdoor.com XSS vulnerability

Vulnerable URL: http://galleries.girlnextdoor.com/021112-7/gallery.php?nats=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

skoda.lv XSS vulnerability

Vulnerable URL: http://www.skoda.lv/gallery.php?model=exterior/superbcombi%22%3E%3Cmarquee%3EXSSPOSED%3C/h1%3E%3Cscript%3Ealert%28%27XSSPOSED%20by%20Shin0bi%20H4x0r%27%29;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 19:02 GMT...

NetClassifieds Standard 1.9/Professional 1.5/Premium 1.0 gallery.php CatID Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/15683/info NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

MLMAuction Script (gallery.php, id param) - SQL Injection

No description provided by source. | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || MLMAuction Script, SQL Injection Vulnerabilities Product Page:...

Quick.Cart <= 2.0 (actions_client/gallery.php) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

JV2 Folder Gallery <= 3.1 - (gallery.php) Remote File Inclusion Vulnerability

No description provided by source...

Church Edit - Blind SQL Injection

No description provided by source. Exploit Title: Church Edit Blind SQL Injection Google Dork: inurl:This website is powered by Church Edit Date: 15/3/2013 Exploit Author: ThatIcyChill Vendor Homepage: http://www.churchedit.co.uk/ Version: Initial Release...