SeasonApps iTransfer 1.1 Script Insertion

Document Title: =============== SeasonApps iTransfer 1.1 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1347 Release Date: ============= 2014-10-27 Vulnerability Laboratory ID VL-ID: ==================================== 134...

Gr& Flagallery <= 4.24 - Full Path Disclosure

The Album and Image Gallery with Lightbox – Flagallery Photo Portfolio WordPress plugin was affected by a Full Path Disclosure security vulnerability...

SeasonApps iTransfer 1.1 - Persistent UI Vulnerability

Document Title: =============== SeasonApps iTransfer 1.1 - Persistent UI Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1347 Release Date: ============= 2014-10-27 Vulnerability Laboratory ID VL-ID: ==================================== 134...

CVE-2014-7652

The Magicam Photo Magic Editor aka mobi.magicam.editor application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Magicam Photo Magic Editor aka mobi.magicam.editor application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7652

The CVE-2014-7652 entry concerns the Magicam Photo Magic Editor (aka mobi.magicam.editor) for Android (version 5.0). The vulnerability is that the application does not verify X.509 SSL certificates, enabling potential man-in-the-middle attackers to spoof servers and obtain sensitive information v...

Information disclosure

The B&H Photo Video Pro Audio aka com.bhphoto application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7577

The B&H Photo Video Pro Audio aka com.bhphoto application 2.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7577

CVE-2014-7577 affects the B&H Photo Video Pro Audio Android app (com.bhphoto) 2.5.1. Root cause: the app does not verify X.509 certificates from SSL servers, enabling potential MITM attackers to spoof servers and access sensitive information via crafted certificates. The connected documents corro...

CVE-2014-7443

The CVE-2014-7443 entry affects the Android app Face Fun Photo Collage Maker 2 (package com.kauf.facefunphotocollagemaker2) version 1.3.0. The vulnerability arises because the app does not verify X.509 SSL/TLS certificates when connecting to servers, enabling a man-in-the-middle attacker to spoof...

Gallery Bank 2.0.26-3.0.69 - Reflected Cross-Site Scripting (XSS)

The WordPress Photo Gallery Plugin by Gallery Bank WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

CVE-2014-7013

The Funny Photo Color Editor aka com.doirdeditor.funcloreditor application 0.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Funny Photo Color Editor aka com.doirdeditor.funcloreditor application 0.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7013

The CVE covers the Android app Funny Photo Color Editor (com.doirdeditor.funcloreditor) version 0.0.4. It fails to verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. The public descriptions...

CVE-2014-7013

The Funny Photo Color Editor aka com.doirdeditor.funcloreditor application 0.0.4 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 callback, 2 dir, or 3 extensions parameter in an addImages action to wp-admin/admin-ajax.php...

CVE-2014-6315

Multiple cross-site scripting XSS vulnerabilities in the Web-Dorado Photo Gallery plugin 1.1.30 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 callback, 2 dir, or 3 extensions parameter in an addImages action to wp-admin/admin-ajax.php...

CVE-2014-6315

CVE-2014-6315 concerns the WordPress plugin Photo Gallery (Web-Dorado) up to version 1.1.30. The vulnerability is a set of Cross-Site Scripting (XSS) flaws exposed via three HTTP GET/parameters to wp-admin/admin-ajax.php: callback, dir, and extensions. The root cause is insufficient sanitization ...

GS Foto Uebertraeger 3.0 iOS - File Include Vulnerability

No description provided by source. Document Title: =============== GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1325 Release Date: ============= 2014-09-22 Vulnerability Laboratory ID VL-ID:...

WordPress Photo Gallery 1.1.30 Cross Site Scripting Vulnerability

WordPress Photo Gallery plugin version 1.1.30 suffers from a cross site scripting vulnerability. Product: Photo Gallery WordPress plugin Vendor: http://web-dorado.com/ Vulnerable Versions: 1.1.30 and probably prior Tested Version: 1.1.30 Advisory Publication: September 10, 2014 without technical...