CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

CVE-2016-1000115 affects Huge-IT Portfolio Gallery Manager for Joomla!, specifically version 1.1.0, with confirmed SQL Injection and XSS. The NVD entry lists a base score of 6.5 (MEDIUM) CVSS2 and 7.2 (HIGH) CVSS3, indicating potential client-side and server-side impact and network-exploitability...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

PT-2016-4507 · Huge It · Huge-It Portfolio Gallery Manager

Name of the Vulnerable Software and Affected Versions: Huge-IT Portfolio Gallery manager version 1.1.0 Description: The issue concerns SQL Injection and XSS in the Huge-IT Portfolio Gallery manager. No information is provided about the estimated number of potentially affected devices or real-worl...

Huge-IT Portfolio Gallery manager SQL Injection Vulnerability

Huge-IT Portfolio Gallery manager is Huge-IT team developed an extension plugin for Joomla! in the management and display of photos, videos and so on. A SQL injection vulnerability exists in Huge-IT Portfolio Gallery manager v1.1.5. An attacker can exploit this vulnerability to inject arbitrary S...