1661 matches found
ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection
ASUSTOR ADM version 3.1.0.RFQ3 is vulnerable to SQL injection via the albumid parameter in the /photo-gallery/api/album/treelists/ endpoint. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the database, potentially leading to information disclosure or further...
Joomla! Roland Breedveld Album 1.14 - Local File Inclusion
Joomla! Roland Breedveld Album 1.14 comalbum is susceptible to local file inclusion because it allows remote attackers to access arbitrary directories and have unspecified other impact via a .. dot dot in the target parameter to index.php. id: CVE-2009-3318 info: name: Joomla! Roland Breedveld...
cve-2026-6379
CVE-2026-6379 — WP Photo Album Plus :8080/?pageid=" --mode probe python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode probe-calendar python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode version python3 ../pocs/exploit.py "http://:8080/?pageid=" --mode hash A vulnerable target replies in...
CVE-2024-10958-WPPA-Exploit
WordPress WP Photo Album Plus Ejecución Arbitraria de Shortcodes CVE-2024-10958 Código PoC para la vulnerabilidad de ejecución arbitraria de shortcodes sin autenticación en el plugin WordPress WP Photo Album Plus. Detalles Versiones Afectadas: = 8.8.08.007 Puntuación CVSS: 7.3 Alta Tipo de...
CVE-2026-102386
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
CVE-2026-102386 WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
CVE-2026-102386
The WP Photo Album Plus WordPress plugin, version 9.3.02.003 and below, contains a Subscriber Cross Site Scripting (XSS) vulnerability. While the specific root cause and internal component are not detailed in the provided documents, the vulnerability allows for XSS impacts. No exploit details or ...
EUVD-2026-89942
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
WordPress WP Photo Album Plus plugin <= 9.3.02.003 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by neurotx in WordPress Plugin WP Photo Album Plus versions = 9.3.02.003...
CVE-2026-102386: Improper Neutralization of Input During Web Page Generation
Subscriber Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.003 versions...
CVE-2026-93774
Unauthenticated Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.002 versions...
EUVD-2026-85468
Unauthenticated Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.002 versions...
CVE-2026-93774
An unauthenticated Cross Site Scripting (XSS) vulnerability exists in the WP Photo Album Plus WordPress plugin, affecting versions
CVE-2026-93774 WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.002 versions...
CVE-2026-93774 WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in WP Photo Album Plus = 9.3.02.002 versions...
CVE-2026-96673
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the albumid path segment. Attackers can supply crafted SQL expressions in the albumid parameter to extract arbitrary data from the databa...
CVE-2026-96673 Photoview through 2.4.0 SQL Injection via album download route
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the albumid path segment. Attackers can supply crafted SQL expressions in the albumid parameter to extract arbitrary data from the databa...
CVE-2026-96673 Photoview through 2.4.0 SQL Injection via album download route
Photoview through 2.4.0 contains an SQL injection vulnerability in the album download route that allows unauthenticated attackers to inject SQL by manipulating the albumid path segment. Attackers can supply crafted SQL expressions in the albumid parameter to extract arbitrary data from the databa...
WordPress WP Photo Album Plus plugin <= 9.3.02.002 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin WP Photo Album Plus versions = 9.3.02.002...