PT-2024-18334 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue affects the Add Members Tab component, where the manipulation of the Member Photo argument leads to unrestricted upload. This can be initiated remotely. The issu...

CVE-2024-1294

The Sunshine Photo Cart: Free Client Galleries for Photographers WordPress plugin (up to version 3.0.24) is vulnerable to unauthenticated Sensitive Information Exposure via the invoices feature, exposing customer emails and physical addresses. A fix exists in version 3.1+; update to 3.1 or later ...

CVE-2024-1294 Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice

The Sunshine Photo Cart: Free Client Galleries for Photographers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.24 via the 'invoice'. This makes it possible for unauthenticated attackers to extract sensitive data including customer...

CVE-2024-1294 Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice

The Sunshine Photo Cart: Free Client Galleries for Photographers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.24 via the 'invoice'. This makes it possible for unauthenticated attackers to extract sensitive data including customer...

PT-2024-17810 · WordPress · Sunshine Photo Cart

Name of the Vulnerable Software and Affected Versions: The Sunshine Photo Cart: Free Client Galleries for Photographers plugin for WordPress versions up to, and including, 3.0.24 Description: The issue allows unauthenticated attackers to extract sensitive data, including customer email and physic...

CVE-2023-40124

In multiple locations, there is a possible cross-user read due to a confused deputy. This could lead to local information disclosure of photos or other images with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the Photo Station photo storage app, which stems from the lack of protective measures for the website structure, allows attackers to execute arbitrary commands.

The vulnerability of the Photo Station photo storage application is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the Photo Station photo storage app, which stems from the lack of protective measures for the website structure, allows attackers to execute arbitrary code.

The vulnerability of the Photo Station photo storage application is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

WordPress Sunshine Photo Cart Plugin <= 3.0.24 is vulnerable to Sensitive Data Exposure

Software Sunshine Photo Cart Type Plugin Vulnerable versions = 3.0.24 Fixed in 3.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-1294 Patch priority Low CVSS severity Low 5.3 Developer WP Sunshine PSID b62f43ca815f Credits Francesco Carlucci Required...

CVE-2024-25108

Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...

CVE-2024-25108

Pixelfed suffers an authorization-check bypass that lets authenticated users obtain access to administrative and moderator functionality. Affected versions are v0.10.4 through v0.11.9 (inclusive); a proof-of-concept exists. Root cause: improper and insufficient checks during request processing al...

tours.robbthielphoto.com Cross Site Scripting vulnerability OBB-3851411

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ACF Photo Gallery Field < 2.7 - Missing Authorization

Description The plugin is vulnerable to unauthorized access of data, modification of data, or loss of data due to a missing capability check on an unknown function, allowing authenticated attackers, with subscriber access and above, to access the unprotected function...

QNAP Photo Station OS Command Injection (QSA-24-08)

The version of Photo Station running on the remote QNAP NAS is affected by an OS command injection vulnerability. If exploited, the vulnerability could allow authenticated users to execute commands via a network. Note that Nessus has not tested for these issues but has instead relied only on the...

PT-2024-20423 · Unknown · Employee Management System

Name of the Vulnerable Software and Affected Versions: Employee Management System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the "edit-photo.php" component. This is due to an Unrestricted File Upload vulnerability. Recommendations: For Employee...

CVE-2024-0221

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.19 via the renameitem function. This makes it possible for authenticated attackers to rename arbitrary files on the server. This can lead ...

CVE-2024-0221

CVE-2024-0221 affects the WordPress plugin Photo Gallery by 10Web – Mobile-Friendly Image Gallery (

CVE-2024-0221 Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.19 via the renameitem function. This makes it possible for authenticated attackers to rename arbitrary files on the server. This can lead ...

CVE-2024-0221 Photo Gallery by 10Web - Mobile-Friendly Image Gallery <= 1.8.19 - Directory Traversal to Arbitrary File Rename

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.19 via the renameitem function. This makes it possible for authenticated attackers to rename arbitrary files on the server. This can lead ...

WordPress plugin Photo Gallery by 10Web security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...