WordPress Huge-IT Video Gallery plugin <=2.0.4 - SQL Injection vulnerability

SQL Injection vulnerability found by Neven Biruski DefenseCode in WordPress Huge-IT Video Gallery plugin version 2.0.4 and earlier versions. Solution Update WordPress Huge-IT Video Gallery plugin to the latest available version...

Gr8 Gallery Script - SQL Injection

Exploit Title: Gr8 Gallery Script - SQL Injection Google Dork: N/A Date: 24.03.2017 Vendor Homepage: http://gr8script.com/ Software: http://gr8script.com/gr8gallery.php Demo: http://www.gr8script.com/gr8gallery/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan Author...

Gr8 Gallery Script SQL Injection

Exploit Title: Gr8 Gallery Script - SQL Injection Google Dork: N/A Date: 24.03.2017 Vendor Homepage: http://gr8script.com/ Software: http://gr8script.com/gr8gallery.php Demo: http://www.gr8script.com/gr8gallery/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan Author...

Joomla Huge-IT Video Gallery 1.0.9 ajax_url.php parameter galleryid SQL injection vulnerability

No description provided by source...

CVE-2016-1000123

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

CVE-2016-1000123

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

Sql injection

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

CVE-2016-1000123

CVE-2016-1000123 describes an unauthenticated SQL Injection in Huge-IT Video Gallery for Joomla (v1.0.9). The vulnerability arises in the Joomla component (and related com_videogallerylite Ajax URL handling) where user-controlled POST data (notably page and galleryid) is used to construct SQL que...

CVE-2016-1000123

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

PT-2016-4515 · Huge It · Huge-It Video Gallery

Name of the Vulnerable Software and Affected Versions: Huge-IT Video Gallery version 1.0.9 Description: The issue is related to an unauthenticated SQL Injection. Recommendations: For version 1.0.9, update to a newer version that contains a fix for this issue, if available. At the moment, there is...

Huge-IT Video Gallery Extension SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . Huge-IT Image Gallery is one of the image gallery extension plug-ins . A SQL injection vulnerability exists in version 1.0.9 ...

Huge IT Video Gallery,1.1.1,XSS (Cross Site Scripting)

Huge IT Video Gallery,1.1.1,XSS Cross Site Scripting Also versions 1.0.9 and previous have SQL injection vulnerability Resolution: update to version 1.1.3 Update notice: https://huge-it.com/joomla-extensions-security-notice/...

Joomla Huge-IT Video Gallery 1.0.9 SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified: 2016-09-17 Vendor Contact: [email protected]...

Joomla! Component com_videogallerylite 1.0.9 - SQL Injection

Joomla! Component comvideogallerylite 1.0.9 - SQL Injection Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor...

Joomla! Component com_videogallerylite 1.0.9 - SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified: 2016-09-17 Vendor Contact: [email protected]...

Joomla Huge-IT Video Gallery 1.0.9 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified...

Gallery - Video Gallery <= 1.7.01 - Stored Cross-Site Scripting (XSS)

The gallery-video WordPress plugin was affected by a Video Gallery = 1.7.01 - Stored Cross-Site Scripting XSS security vulnerability...

WordPress Video Gallery Plugin <= 1.7.01 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary web script or HTML. Solution Update this plugin...

HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The hdw-tube WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/hdw-tube/playlist.php?playlist="alert1;alert1;"...

WordPress HDW Video Gallery Plugin <= 1.2 - Cross-Site Scripting (XSS)

Because of this vulnerability, the variable playlist appears to send unsanitized data back to the users browser. Solution Update the plugin...