6693 matches found
Synology Photo Station Command Injection and multiple Cross Site Scripting Vulnerabilities
Synology Photo Station is prone to a command injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sanitize user-supplied input. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright...
WordPress Plugin Simple Photo Gallery 1.7.8 - Blind SQL Injection
Exploit Title: Wordpess Simple Photo Gallery Blind SQL Injection Date: 12-05-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/simple-photo-gallery/ Version: 1.7.8 Tested on: Apache 2.2.22, PHP 5.3.10 OSVDB ID : http://www.osvdb.org/show/osvdb/122374 WPVULNDB ID :...
CVE-2015-3647
Multiple cross-site scripting XSS vulnerabilities in wppa-ajax-front.php in the WP Photo Album Plus aka WPPA plugin before 6.1.3 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 comemail or 2 comname parameter in a wppa do-comment action...
Google to Introduce New Photo-Sharing Platform to Kill Instagram
Google is reportedly going to launch a new online photo-sharing service and storage option at its developer conference later this month, which Bloomberg says, will not be a part of its Google+ social network. At the moment, Google offers a photo sharing service known as "Google+ Photos," which...
WordPress Simple Photo Gallery Plugin <= 1.7.8 - Blind SQL Injection
This plugin is prone to an SQL injection vulnerability in the "galleryid" parameter. Solution Update the plugin...
Simple Photo Gallery 1.7.8 - Blind SQL Injection
MySQL = 5.0.12 AND time-based blind SELECT sql injection in the galleryid parameter. ./sqlmap.py --dbms=MYSQL --technique T -u http://www.example.com/wordpress/index.php/wppgphotogallery/wppgphotodetails/?galleryid=1&imageid=14...
WordPress WP Photo Album Plus 6.1.2 Cross Site Scripting Vulnerability
WordPress WP Photo Album Plus plugin version 6.1.2 suffers from a cross site scripting vulnerability. Product: WP Photo Album Plus WordPress Plugin Vendor: J.N. Breetvelt Vulnerable Versions: 6.1.2 and probably prior Tested Version: 6.1.2 Advisory Publication: April 29, 2015 without technical...
Simple Photo Gallery 1.7.8 - Blind SQL Injection
MySQL = 5.0.12 AND time-based blind SELECT sql injection in the galleryid parameter. PoC ./sqlmap.py --dbms=MYSQL --technique T -u http://www.example.com/wordpress/index.php/wppgphotogallery/wppgphotodetails/?galleryid=1ℑid=14...
WordPress WP Photo Album Plus 6.1.2 Cross Site Scripting
Advisory ID: HTB23257 Product: WP Photo Album Plus WordPress Plugin Vendor: J.N. Breetvelt Vulnerable Versions: 6.1.2 and probably prior Tested Version: 6.1.2 Advisory Publication: April 29, 2015 without technical details Vendor Notification: April 29, 2015 Vendor Patch: April 29, 2015 Public...
WordPress plugin WP Photo Album stores cross-site scripting vulnerabilities
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin WP Photo Album. Due to the lack of user-supplied filters for scripts passed to the...
Wireless Photo Transfer 3.0 iOS - File Inclusion Vulnerability
Exploit for iOS platform in category web applications Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability Product & Service Introduction: =============================== Transfer your photo without usb. The best wireless photo transfer app on the App Stor...
Wireless Photo Transfer 3.0 iOS - Local File Inclusion
Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-12 Vulnerability Laboratory ID VL-ID:...
Wireless Photo Transfer 3.0 iOS - Local File Inclusion
Wireless Photo Transfer 3.0 iOS - Local File Inclusion Document Title: =============== Wireless Photo Transfer v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1492 Release Date: ============= 2015-05-12 Vulnerability...
WordPress WP Photo Album Plus Plugin <= 5.4.17 Reflected XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress WP Photo Album Plus Plugin <= 5.0.10 - XSS
This plugin is prone to wp-admin/admin.php editid parameter cross site scripting vulnerability. Solution Update the plugin...
WordPress WP Photo Album Plus Plugin <= 5.4.8 - Stored XSS
This plugin is prone to a stored cross site scripting vulnerability. Solution Update the plugin...
WordPress Mac Photo Gallery Plugin <= 2.9 - Multiple Vulnerabilities
This plugin is prone to multiple script insertion vulnerabilities. Because of them, attackers can conduct script insertion attacks. Solution Upgrade plugin...
WordPress Mac Photo Gallery Plugin - Bypass
This plugin is prone to two security bypass security issues. Attackers can bypass certain security restrictions. Solution Update the plugin...
jsDelivr: Pretty Photo Dom XSS
Hi Team, Javascript for http://www.jsdelivr.com/!prettyphoto hosted on the website points to 3.1.5 which is vulnerable to DOMXSS the upstream released an update 3.1.6 7 days back still the CDN is serving vulnerable edition effectively making all the websites vulnerable to DoMXSS Details about the...