WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload

Summary: WordPress Slideshow Gallery plugin version 1.4.6 suffers from a remote shell upload vulnerability. Found by: Jesus Ramirez Pichardo @whitexploit http://whitexploit.blogspot.mx/ Date: 2014-08-28 Vendor Homepage: http://tribulant.com/ Software: Slideshow Gallery Version: 1.4.6 Software Lin...

WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload

WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload Summary: WordPress Slideshow Gallery plugin version 1.4.6 suffers from a remote shell upload vulnerability. Found by: Jesus Ramirez Pichardo @whitexploit http://whitexploit.blogspot.mx/ Date: 2014-08-28 Vendor Homepage:...

WordPress Slideshow Gallery 1.4.6 Shell Upload

WordPress Slideshow Gallery 1.4.6 Shell Upload Vulnerability CVE-2014-5460 WordPress Slideshow Gallery plugin version 1.4.6 suffers from a remote shell upload vulnerability. Vendor Homepage: http://tribulant.com/ Software: Slideshow Gallery Version: 1.4.6 Software Link:...

WordPress Plugin GB Gallery Slideshow - '/wp-admin/admin-ajax.php' SQL Injection

source: https://www.securityfocus.com/bid/69181/info The GB Gallery Slideshow plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the...

Wordpress GB Gallery Slideshow 1.5 Authenticated SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress GB Gallery Slideshow 1.5 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://gb-plugins.com/ Software Link : http://downloads.wordpress.org/plugin/gb-gallery-slideshow.1.5.zip Date :...

WordPress GB Gallery Slideshow 1.5 SQL Injection

Exploit Title : Wordpress GB Gallery Slideshow 1.5 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://gb-plugins.com/ Software Link : http://downloads.wordpress.org/plugin/gb-gallery-slideshow.1.5.zip Date : 2014-08-09 Tested on : Linux / sqlmap 1.0-dev-5b2ded0...

WordPress GB Gallery Slideshow Plugin - SQL Injection

This WordPress GB Gallery Slideshow plugin's "wp-admin/admin-ajax.php" is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin GB Gallery Slideshow - wp-adminadmin-ajax.php SQL Injection

WordPress Plugin GB Gallery Slideshow - wp-adminadmin-ajax.php SQL Injection source: https://www.securityfocus.com/bid/69181/info The GB Gallery Slideshow plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it i...

Rekt Slideshow 1.0.5 - Shell Upload

The rekt-slideshow WordPress plugin was affected by a Shell Upload security vulnerability...

Slideshow jQuery Image Gallery - Multiple Vulnerabilities

The Slideshow WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...

Slideshow - Multiple Script Insertion Vulnerabilities

The Slideshow WordPress plugin was affected by a Multiple Script Insertion Vulnerabilities security vulnerability...

Wordpress Levo-Slideshow - Arbitrary File Upload

The wp-levoslideshow WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

wp-homepage-slideshow - Arbitrary File Upload

The wp-homepage-slideshow WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

Smart Slideshow - upload.php Multiple File Extension Upload Arbitrary Code Execution

The smart-slide-show WordPress plugin was affected by an upload.php Multiple File Extension Upload Arbitrary Code Execution security vulnerability...

ZooEffect 1.08 - HTTP Referer Reflected XSS

Description The ZooEffect Plugin for Video player, Photo Gallery Slideshow jQuery and audio / music / podcast – HTML5 WordPress plugin was affected by a HTTP Referer Reflected XSS security vulnerability...

Movavi VideoSuite 8.0 SlideShow jpg Local Crash PoC

No description provided by source...

wordpress image gallery with slideshow plugin <= 1.5 - Multiple Vulnerabilities

No description provided by source. Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: cu...

WordPress SH Slideshow plugin <= 3.1.4 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress SH Slideshow plugin = 3.1.4 SQL Injection Vulnerability Date: 2011-08-29 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/sh-slideshow.3.1.4.zip Version: 3.1.4 tested...

WordPress Plugin cnhk-Slideshow - Arbitrary File Upload

WordPress Plugin cnhk-Slideshow - Arbitrary File Upload source: https://www.securityfocus.com/bid/67469/info The cnhk-slideshow plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize...

WordPress cnhk-slideshow Shell Upload

Exploit Title: Wordpress cnhk-slideshow plugin Shell Upload Author: Ashiyane Digital Security Team Date: 05/18/2014 Vendor Homepage: http://cnhk-systems.webege.com Software Link : http://downloads.wordpress.org/plugin/cnhk-slideshow.2.1.1.zip Google dork: inurl:/wp-content/plugins/cnhk-slideshow/...