4643 matches found
WordPress Image Slider 1.1.41 / 1.1.89 Arbitrary File Deletion Vulnerability
WordPress Image Slider plugin versions 1.1.41 and 1.1.89 suffer from an arbitrary file deletion vulnerability. Details ================ Software: Image Slider Version: 1.1.41,1.1.89 Homepage: http://wordpress.org/plugins/image-slider-widget/ Advisory report:...
WordPress Image Slider 1.1.41 / 1.1.89 Arbitrary File Deletion
Details ================ Software: Image Slider Version: 1.1.41,1.1.89 Homepage: http://wordpress.org/plugins/image-slider-widget/ Advisory report: https://security.dxw.com/advisories/arbitrary-file-deletion-vulnerability-in-image-slider-allows-authenticated-users-to-delete-files/ CVE: Awaiting...
WordPress Slider Plugin <= 1.1.89 - Authenticated Arbitrary File Deletion
This plugin is prone to an authenticated arbitrary file deletion vulnerability. Any user can can delete arbitrary files. Solution Update the plugin...
Slider <= 1.1.89 - Authenticated Arbitrary File Deletion
The Image Slider WordPress plugin was affected by an Authenticated Arbitrary File Deletion security vulnerability...
Cross-site scripting vulnerability in Wordpress plugin hulvire-slider
WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the Wordpress plugin hulvire-slider. The program fails to filter user-supplied input, allowing an attacker to constru...
CVE-2016-1000122
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000122
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
Cross site scripting
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
CVE-2016-1000121
CVE-2016-1000121 affects the Huge IT Joomla Slider extension v1.0.9. The connected documents describe reflected XSS and SQL Injection vulnerabilities in the component, arising from inadequate input filtering in the extension’s admin code paths (notably in the slider manager and related PHP files)...
CVE-2016-1000122
The CVE-2016-1000122 entry describes XSS and SQL injection in the Huge IT Joomla Slider v1.0.9 extension. Connected sources corroborate affected functionality in the admin area: XSS via id parameter in ./admin/views/slider/tmpl/default.php and SQL injection in ./admin/models/slider.php. The root ...
CVE-2016-1000122
XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension...
Huge IT Slider,1.0.9,SQL Injection
Huge IT Slider,1.0.9,SQL Injection Resolution: update to 1.1.0 update notice: https://huge-it.com/joomla-extensions-security-notice/...
Multiple Vulnerabilities in the Joomla! Huge-IT Slider Extension
Joomla! is an open source content management system CMS developed by the Open Source Matters team in the United States. The system provides RSS feeds , site search , etc. Huge-IT Slider is one of the extensions to attract visitors by improving the style and features of the site . A SQL injection...
Multiple vulnerabilities in the Joomla! Huge-IT Slider extension (CNVD-2016-05829)
Joomla! is an open source content management system CMS developed by the Open Source Matters team in the United States. The system provides RSS feeds , site search , etc. Huge-IT Slider is one of the extensions to attract visitors by improving the style and features of the site . A SQL injection...
Huge IT Joomla Slider 1.0.9 XSS / SQL Injection
Title: Reflected XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension Author: Larry W. Cashdollar, @larry0 Date: 2016-07-22 Download Site: http://extensions.joomla.org/extensions/extension/photos-a-images/slider Vendor: huge-it.com Vendor Notified: 2016-07-22 Vendor Contact: Description: Huge-I...