WordPress DZS Video Gallery Plugin - Reflected XSS

This plugin is prone to a cross site scripting vulnerability in ajax.php source parameter. Solution Update the plugin...

WordPress Contus Video Gallery Plugin SQL Injection Vulnerability

WordPress is a content management system developed using PHP language. Contus Video Gallery is a video gallery plugin for WordPress sites. A SQL injection vulnerability exists in Contus Video Gallery 2.7 and earlier versions due to the program failing to properly filter the content of the "vid" G...

Wordpress Video Gallery 2.8 plugin SQL Injection

Wordpress Video Gallery 2.8 SQL Injection Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Wordpress Video Gallery Plugin 2.8 /hdflvvideoshare.php SQL注入漏洞

No description provided by source...

Wordpress Video Gallery SQL Injection Vulnerability

WordPress is a use of PHP language development blog platform, users can support PHP and MySQL database server set up their own weblog. A SQL injection vulnerability exists in Wordpress Video Gallery. An attacker can exploit this vulnerability to compromise the application, access or modify data...

Wordpress Video Gallery 2.8 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Video Gallery 2.8 SQL Injection Vulnerabilitiey Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

WordPress Video Gallery Plugin 2.8 - SQL Injection

This WordPress Video Gallery plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...

WordPress Plugin Video Gallery 2.8 - SQL Injection

WordPress Plugin Video Gallery 2.8 - SQL Injection Exploit Title : Wordpress Video Gallery 2.8 SQL Injection Vulnerabilitiey Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

WordPress Video Gallery 2.8 SQL Injection

Exploit Title : Wordpress Video Gallery 2.8 SQL Injection Vulnerabilitiey Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.8.zip Dork Google:...

WordPress Plugin Video Gallery 2.8 - SQL Injection

Exploit Title : Wordpress Video Gallery 2.8 SQL Injection Vulnerabilitiey Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.8.zip Dork Google:...

WordPress Video Gallery <= 2.8 - SQL Injection

Note: The vendor patched the issue but did not change the version number. Using fixed in version 2.8.1 for detection reasons although in reality this version does not exist at the time of writing. http://www.example.com/wp-admin/admin-ajax.php?action=googleadsense&vid=SQLi...

WordPress Video Gallery <= 2.8 - SQL Injection

Note: The vendor patched the issue but did not change the version number. Using fixed in version 2.8.1 for detection reasons although in reality this version does not exist at the time of writing. PoC http://www.example.com/wp-admin/admin-ajax.php?action=googleadsense=SQLi...

WordPress Apptha Video Gallery < 2.8 Blind SQLi Vulnerability

WordPress Apptha Video Gallery is prone to a blind SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Video Gallery <= 2.8 - Unprotected Mail Page

Any user can send email from /contus-video-gallery/email.php to any recipients...

WordPress Video Gallery Plugin <= 2.8 - Unprotected Mail Page

This plugin is prone to an unprotected mail page vulnerability. Solution Update the plugin...

WordPress Plugin Video Gallery 2.8 - Multiple Cross-Site Request Forgery Vulnerabilities

WordPress Plugin Video Gallery 2.8 - Multiple Cross-Site Request Forgery Vulnerabilities Exploit Title: Wordpress Video Gallery Plugin Multiple CSRF File Upload Google Dork: inurl:/wp-content/plugins/contus-video-gallery Date: 31 March 2015 Exploit Author: Divya Vendor Homepage:...

WordPress Plugin Video Gallery 2.8 - Multiple Cross-Site Request Forgery Vulnerabilities

Exploit Title: Wordpress Video Gallery Plugin Multiple CSRF File Upload Google Dork: inurl:/wp-content/plugins/contus-video-gallery Date: 31 March 2015 Exploit Author: Divya Vendor Homepage: https://wordpress.org/plugins/contus-video-gallery/ Software Link:...

WordPress Video Gallery <= 2.8 - Multiple Cross-Site Request Forgery (CSRF)

The contus-video-gallery WordPress plugin was affected by a Multiple Cross-Site Request Forgery CSRF security vulnerability...

WordPress Video Gallery Plugin 2.8 - Multiple CSRF Vulnerabilities

WordPress Video Gallery plugin is prone to cross-site request forgery vulnerabilities. These vulnerabilities allow an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Upgrade the plugin...

NASA.gov Cross Site Scripting

Exploit Title: NASA.gov main-domain DOM-XSS Date: 01/04/2015 Author: Yann CAM - Georges TAUPIN @ Synetis - ASafety Vendor or Software Link: www.nasa.gov Version: / Category: DOM-XSS Google dork: Tested on: NASA.gov main-domain NASA description :...