WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities

WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link:...

WordPress Image Gallery With Slideshow 1.5 SQL Injection / Shell Upload

Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: curl -F "[email protected]"...

WordPress Plugin Image Gallery with Slideshow <= 1.5 - Multiple Vulnerabilities

Multiple vulnerabilities found in WordPress Plugin Image Gallery with Slideshow version 1.5 and earlier versions. Solution Upgrade the plugin...

WordPress Plugin image Gallery with Slideshow 1.5 - Multiple Vulnerabilities

Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link: http://wordpress.org/extend/plugins/image-gallery-with-slideshow/ PoC: curl -F "[email protected]"...

Plugin for WordPress SH Slideshow <= 3.1.4 SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Title: WordPress SH Slideshow plugin Affected version: 3.1.4 tested --------------- Test method --------------- /wp-content/plugins/sh-slideshow/ajax.php id=-1 AND 1=IF21,BENCHMARK5 0 0 0 0 0 0,MD5CHAR115,113,108,109,97,112,0--%2 0 --------------- Defect code analysis --------------- $result =...

Wordpress Image Gallery with Slideshow plugin <= 1.5 Vulnerabilities

Exploit for php platform in category web applications Title: Wordpress image-gallery-with-slideshow plugin = 1.5 Arbitrary file upload / SQL injection Version:1.5 Date: 30-8-2011 Author: Hrvoje Spoljar hrvoje.spoljaratgmail.com Software link:...

WordPress Plugin SH Slideshow 3.1.4 - SQL Injection

WordPress Plugin SH Slideshow 3.1.4 - SQL Injection Exploit Title: WordPress SH Slideshow plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $result = $wpdb-query'delete from shslides where id = '.$POST'id';...

WordPress SH Slideshow plugin <= 3.1.4 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress SH Slideshow plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $result = $wpdb-query'delete from shslides where id = '.$POST'id'; 0day.today 2018-04-10...

WordPress SH Slideshow Plugin <= 3.1.4 - SQL Injection

SH Slideshow plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin SH Slideshow 3.1.4 - SQL Injection

Exploit Title: WordPress SH Slideshow plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- $result = $wpdb-query'delete from shslides where id = '.$POST'id';...

Joomla! Component com_xeslidegalfx - 'id' SQL Injection

source: https://www.securityfocus.com/bid/48981/info The 'Slideshow Gallery' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise t...

YaPiG 0.95 Cross Site Scripting

Vulnerability ID: HTB22962 Reference: http://www.htbridge.ch/advisory/multiplexssinyapig.html Product: YaPiG Yet Another PHP Image Gallery Vendor: http://yapig.sourceforge.net/ http://yapig.sourceforge.net/ Vulnerable Version: 0.95 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cross...

Movavi VideoSuite 8.0 Buffer Overflow

!/usr/bin/perl Title : MovaviVideoSuite8.0 'Create SlideShow' Buffer Overflow Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans Tested on : windows XP SP3 Français & Arabic Target : Movavi Video Suite 8.0 Note : Thi...

WordPress Feature Slideshow 1.0.6-beta Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress Feature Slideshow 1.0.6-beta Vulnerability...........Reflected Cross-site Scripting Download................http://sleek.no/kunder/138 Release Date............1/24/2011 Tested...

WordPress Feature Slideshow Plugin 1.0.6 - Cross-Site Scripting Vulnerability

Feature Slideshow plugin's "src" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin Feature Slideshow 1.0.6 - src Cross-Site Scripting

WordPress Plugin Feature Slideshow 1.0.6 - src Cross-Site Scripting source: https://www.securityfocus.com/bid/46004/info The Feature Slideshow Plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage...

Joomla Slideshow SQL Injection

Joomla Component slideshow SQL Injection Vulnerability Author :Fl0riX Bug Researchers Name : Joomla Comslideshow Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : http://www.nhainsaigon.com/index.php?option=comslideshow&catid=EXPLOIT Bug Fix Advice : Zararli...

PYSEC-2010-18

Multiple cross-site scripting XSS vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to 1 action/SlideShow.py, 2 action/anywikidraw.py, and 3 action/languagesetup.py, a similar issue to CVE-2010-2487...

Exponent CMS 0.97.0 Cross Site Scripting

Title: Exponent Slideshow XSS Vulnerability Vendor: Exponent Product: Exponent CMS Tested Version: 0.97.0 Threat Class: XSS Severity: High Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== The file "modules/slideshowmodule/slideshow.js.php" is prone to XSS...

Exponent Slideshow XSS Vulnerability

Title: Exponent Slideshow XSS Vulnerability Vendor: Exponent Product: Exponent CMS Tested Version: 0.97.0 Threat Class: XSS Severity: High Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== The file "modules/slideshowmodule/slideshow.js.php" is prone to XSS...