WordPress Apptha Video Gallery < 2.8 Blind SQLi Vulnerability

WordPress Apptha Video Gallery is prone to a blind SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! Component com_simplephotogallery 1.0 - SQL Injection

Joomla! Component comsimplephotogallery 1.0 - SQL Injection ====================================================================================== Title : Joomla Simple Photo Gallery - SQL injection Author : Mr.Moneer Dork Google 1: inurl:/comsimplephotogallery site:com Dork Google 2:...

Joomla! Component com_simplephotogallery 1.0 - SQL Injection

====================================================================================== Title : Joomla Simple Photo Gallery - SQL injection Author : Mr.Moneer Dork Google 1: inurl:/comsimplephotogallery site:com Dork Google 2: inurl:/comsimplephotogallery site:org Dork Google 3:...

Joomla Simple Photo Gallery - Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Simple Photo Gallery - Arbitrary File Upload Google Dork: inurl:comsimplephotogallery Date: 10.03.2015 Exploit Author: CrashBandicot @DosPerl My Github: github.com/CCrashBandicot Vendor Homepage: https://www.apptha.com/...

Joomla! Component com_simplephotogallery 1.0 - Arbitrary File Upload

Exploit Title: Joomla Simple Photo Gallery - Arbitrary File Upload Google Dork: inurl:comsimplephotogallery Date: 10.03.2015 Exploit Author: CrashBandicot @DosPerl My Github: github.com/CCrashBandicot Vendor Homepage: https://www.apptha.com/ Software Link:...

Sql injection

SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...

CVE-2015-2065

CVE-2015-2065 is a SQL injection vulnerability in the Apptha WordPress Video Gallery (contus-video-gallery) plugin for WordPress, affecting versions before 2.8. The flaw allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php. The...

WordPress Apptha Video Gallery Plugin <= 2.7 - SQL Injection

Because of this vulnerability, the attackers can execute arbitrary SQL commands via the "vid" parameter in a rss action to wp-admin/admin-ajax.php. Solution Update the plugin...

WordPress Video Gallery 2.7 SQL Injection

Exploit Title : Wordpress Video Gallery 2.7 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.7.zip Dork Google:...

Wordpress Video Gallery 2.7.0 SQL Injection Vulnerability

Photo Gallery Plugin for WordPress contains a flaw that allows a remote attacker to execute arbitrary PHP code. This flaw exists because the photo-gallery\photo-gallery.php script allows access to filemanager\UploadHandler.php. The post method in UploadHandler.php Exploit Title : Wordpress Video...

WordPress Plugin Video Gallery 2.7.0 - SQL Injection

Exploit Title : Wordpress Video Gallery 2.7 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.7.zip Dork Google:...

HDFLVPlayer, 2.0, Directory Traversal

HDFLVPlayer, 2.0, Directory Traversal Contus/apptha developers statement We fixed the directory traversal issue and updated the version with 2.2 UpdateNoticeURL http://www.hdflvplayer.net/hd-flv-player-download.php...

CVE-2014-9097

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow 1 remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to wp-admin/admin-ajax.php ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to 1...

Sql injection

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow 1 remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to wp-admin/admin-ajax.php ...

CVE-2014-9098

Multiple cross-site scripting XSS vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly before 2014-07-23, for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to 1...

CVE-2014-9097

Multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery contus-video-gallery plugin 2.5, possibly as distributed before 2014-07-23, for WordPress allow 1 remote attackers to execute arbitrary SQL commands via the vid parameter in a myextract action to wp-admin/admin-ajax.php ...

CVE-2014-9098

CVE-2014-9098 is confirmed to affect the Apptha WordPress Video Gallery (contus-video-gallery) plugin version 2.5. The vulnerability is a cross-site scripting (XSS) flaw that allows remote authenticated users to inject arbitrary web script or HTML via the videoadssearchQuery parameter to (1) vide...

CVE-2014-9097

CVE-2014-9097 involves multiple SQL injection vulnerabilities in the Apptha WordPress Video Gallery (contus-video-gallery) plugin 2.5. The issues allow (1) remote attackers to execute arbitrary SQL via vid in myextract action to wp-admin/admin-ajax.php, (2) remote authenticated users to run SQL v...

WordPress Apptha Video Gallery Plugin <= 2.5 - Multiple SQL Injection

Because of these vulnerabilities, the attackers can execute arbitrary SQL commands via the "videoId" parameter in a newvideo page to wp-admin/admin.php, "vid" parameter in a myextract action to wp-admin/admin-ajax.php or "playlistId" parameter in the newplaylist page. Solution Update the plugin...