12 matches found
israpost.com XSS vulnerability
Vulnerable URL: http://www.israpost.com/Community/gallery/album.php?AmountToShow=30foldersstate=841id=894〈=heb=1"...
Community Gallery - Srored Corss-Site Scripting vulnerability
Vulnerability title: Community Gallery - Srored Corss-Site Scripting vulnerability Product: Community Gallery Vendor: https://www.woltlab.com Affected version: Community Gallery 2.0 before 12/10/2014 Download link: https://www.woltlab.com/purchase/?products=com.woltlab.gallery Fixed version:...
WoltLab Community Gallery Cross-Site Scripting Vulnerability
WoltLab Community Gallery is a set of community photo gallery applications for sharing images and experiences in the community by WoltLab Germany. A cross-site scripting vulnerability exists in version 2.0 of WoltLab Community Gallery prior to 2014-12-26, which stems from a failure of the...
WoltLab Community Gallery - Persistent Cross-Site Scripting
Vulnerability title: Community Gallery - Stored Cross-Site Scripting vulnerability Product: Community Gallery Vendor: https://www.woltlab.com Affected version: Community Gallery 2.0 before 12/10/2014 Download link: https://www.woltlab.com/purchase/?products=com.woltlab.gallery Fixed version:...
CVE-2015-2275
Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...
Cross site scripting
Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...
CVE-2015-2275
Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...
CVE-2015-2275
Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...
CVE-2015-2275
WoltLab Community Gallery 2.0 (pre-12/26/2014) is affected by a stored XSS via parameters[data][7][title] in the saveImageData action to index.php/AJAXProxy. The vulnerability enables arbitrary script/HTML injection and is documented with a PoC and public references. Fixed in Community Gallery 2....
PT-2015-5692
Name of the Vulnerable Software and Affected Versions WoltLab Community Gallery version 2.0 before 2014-12-26 Description The issue allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a "saveImageData" action to "index.php/AJAXProxy". This is a...
CVE-2015-2275: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...
Community Gallery 2.0 Cross Site Scripting
Vulnerability title: Community Gallery - Srored Corss-Site Scripting vulnerability Product: Community Gallery Vendor: https://www.woltlab.com Affected version: Community Gallery 2.0 before 12/10/2014 Download link: https://www.woltlab.com/purchase/?products=com.woltlab.gallery Fixed version:...