Mail.ru: Подмена фотографий автомобиля [city-mobil.ru/taxiserv/]

Possibility to change the photo at external-storage.city-mobil.ru by controlling the parameter photourl and id on city-mobil.ru/taxiserv/...

WordPress Envira Photo Gallery Plugin < 1.8.3.3 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:enviragallery:enviragallery"; ifdescription...

CVE-2021-24139

Unvalidated input in the Photo Gallery 10Web Photo Gallery WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwgsearchx parameter...

CVE-2021-24139

Unvalidated input in the Photo Gallery 10Web Photo Gallery WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwgsearchx parameter...

Sql injection

Unvalidated input in the Photo Gallery 10Web Photo Gallery WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwgsearchx parameter...

CVE-2021-24139

Unvalidated input in the Photo Gallery 10Web Photo Gallery WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwgsearchx parameter...

CVE-2021-24139 Photo Gallery by 10Web < 1.5.55 - Unauthenticated SQL Injection

Unvalidated input in the Photo Gallery 10Web Photo Gallery WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwgsearchx parameter...

CVE-2021-24139

CVE-2021-24139 affects the WordPress plugin 10Web Photo Gallery; versions prior to 1.5.55 contain an SQL injection in frontend/models/model.php via the bwg_search_x parameter. The issue is confirmed by connected data (Nuclei template: 10Web Photo Gallery

PT-2021-15684

Name of the Vulnerable Software and Affected Versions: 10Web Photo Gallery versions prior to 1.5.55 Description: The issue is related to unvalidated input in the Photo Gallery WordPress plugin, which leads to SQL injection. This occurs via the bwg search x parameter in the frontend/models/model.p...

Wordpress Photo Gallery SQL注入漏洞

Wordpress Photo Gallery is Wordpress open source an application plugin . It provides a feature to add responsive galleries and photo albums to a website. A SQL injection vulnerability exists in the WordPress Photo Gallery plugin, which originates from the frontend/models/model.php bwgsearchx...

CVE-2021-26884

Windows Media Photo Codec Information Disclosure Vulnerability...

CVE-2021-26884

Windows Media Photo Codec Information Disclosure Vulnerability...

Information disclosure

Windows Media Photo Codec Information Disclosure Vulnerability...

CVE-2021-26884 Windows Media Photo Codec Information Disclosure Vulnerability

...

CVE-2021-26884

CVE-2021-26884 is described as a Windows Media Photo Codec Information Disclosure Vulnerability . The connected documents confirm the CVE is associated with Windows Media components and appear in multiple vulnerability lists (NVD, CVE List, OpenVAS). The materials do not provide a concrete root-c...

Microsoft Windows 信息泄露漏洞

Microsoft Windows is a desktop operating system from Microsoft Corporation USA. An information disclosure vulnerability exists in Windows Media Photo Codec. The following products and editions are affected:Windows 10 Version 1809 for ARM64-based Systems,Windows Server 2019,Windows Server 2019...

PT-2021-2401 · Microsoft · Windows Media Photo Codec +1

Name of the Vulnerable Software and Affected Versions: Windows Media Photo Codec affected versions not specified Description: The issue is related to insufficient protection of service data in the Windows Media Photo Codec component, which can allow an attacker to gain unauthorized access to...

Photo Gallery by 10web < 1.5.69 - Reflected Cross-Site Scripting (XSS)

The plugin did not properly sanitise the bwgsearchX GET parameter, available in a frontend gallery when the Show Search Box setting is enabled disabled by default, leading to a reflected Cross-Site Scripting issue PoC Append the below payload in a page with an embedded gallery and the Show Search...

Photo Gallery by 10web < 1.5.69 - Reflected Cross-Site Scripting (XSS)

The plugin did not properly sanitise the bwgsearchX GET parameter, available in a frontend gallery when the Show Search Box setting is enabled disabled by default, leading to a reflected Cross-Site Scripting issue Append the below payload in a page with an embedded gallery and the Show Search Box...

QNAP Photo Station XSS Vulnerability (QSA-21-06)

QNAP Photo Station is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...