919 matches found
WordPress Tribulant Slideshow Gallery Plugin Cross-Site Scripting Vulnerability
Tribulant Slideshow Gallery is an application plugin available on the official WordPress Store that provides JavaScript-based sliding photo albums. A cross-site scripting vulnerability exists in the WordPress Tribulant Slideshow Gallery plugin where the Gallerymessage parameter submitted to the...
Slideshow Gallery <= 1.6.5 - Multiple Authenticated Cross-Site Scripting (XSS)
The Slideshow Gallery WordPress plugin was affected by a Multiple Authenticated Cross-Site Scripting XSS security vulnerability. PoC http://vulnerablesite.com/wp-admin/admin.php?page=slideshowgalleries=view=1%5C%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...
Slideshow Gallery <= 1.6.5 - Multiple Authenticated Cross-Site Scripting (XSS)
The Slideshow Gallery WordPress plugin was affected by a Multiple Authenticated Cross-Site Scripting XSS security vulnerability. http://vulnerablesite.com/wp-admin/admin.php?page=slideshowgalleries&method=view&id=1%5C%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...
WordPress Tribulant Slideshow Galleries 1.6.3 Cross Site Scripting
------------------------------------------------------------------------ Cross-Site Scripting vulnerability in Tribulant Slideshow Galleries WordPress Plugin ------------------------------------------------------------------------ Spyros Gasteratos, July 2016...
Tribulant Slideshow Gallery <= 1.6.4 - Authenticated Cross-Site Scripting (XSS)
The Slideshow Gallery WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...
CVE-2016-1000118
XSS & SQLi in HugeIT slideshow v1.0.4...
CVE-2016-1000118
XSS & SQLi in HugeIT slideshow v1.0.4...
CVE-2016-1000117
XSS & SQLi in HugeIT slideshow v1.0.4...
CVE-2016-1000117
XSS & SQLi in HugeIT slideshow v1.0.4...
Cross site scripting
XSS & SQLi in HugeIT slideshow v1.0.4...
Cross site scripting
XSS & SQLi in HugeIT slideshow v1.0.4...
CVE-2016-1000118
CVE-2016-1000118 affects HugeIT Slideshow v1.0.4 ( Joomla! extension). Connected records confirm a SQL injection vulnerability in /models/slideshow.php and NVD also lists XSS in the same product/version. Impact per sources includes possible arbitrary SQL execution and cross‑site scripting; exploi...
CVE-2016-1000117
XSS & SQLi in HugeIT slideshow v1.0.4...
CVE-2016-1000117
Consolidated details show CVE-2016-1000117 affects the Huge-IT Slideshow extension (Joomla!) v1.0.4. The vulnerability is described as cross-site scripting (XSS) and SQL injection (SQLi). CNVD-2016-06066 specifies the flaw resides in /views/slideshow/tmpl/default.php and is exploitable via the 'i...
CVE-2016-1000118
XSS & SQLi in HugeIT slideshow v1.0.4...
Icecream Apps Insecure File Permissions / Privilege Escalation
Exploit Title: Multiple Icecream Apps Local Privilege Escalation Date: 13/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: icecreamapps.com Software Versions Affected: Icecream Ebook Reader 4.21 | Icecream Screen Recorder 4.21...
Huge-IT Slideshow SQL Injection Vulnerability
Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /models/slideshow.php file contains a SQL injection vulnerability. An attacker can exploit this vulnerability ...
Huge-IT Slideshow Cross-Site Scripting Vulnerability
Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /views/slideshow/tmpl/default.php file is vulnerable to cross-site scripting. The vulnerability can be exploit...
