extremeporngalleries.com XSS vulnerability

Vulnerable URL: http://www.extremeporngalleries.com/extremeholly/pics/037van/index.php?nats=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:45 GMT Vulnerability type:| XSS Vulnerability status:|...

coedcherry.com XSS vulnerability

Vulnerable URL: http://www.coedcherry.com/galleries?tags=" Details: Description| Value ---|--- Patched:| Yes, at 26.09.2015 Latest check for patch:| 26.09.2015 04:09 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15863 Google Pagerank| 2 VIP website status:| Ye...

PT-2015-5262

Name of the Vulnerable Software and Affected Versions Photo Gallery plugin versions prior to 1.2.11 for WordPress Description The issue allows remote authenticated users to execute arbitrary SQL commands. This is achieved via the asc or desc parameter in a create gallery request in the "galleries...

WordPress Photo Gallery 1.2.8 XSS / SQL Injection Vulnerabilities

WordPress Photo Gallery plugin version 1.2.8 suffers from a cross site scripting and remote SQL injection vulnerabilities CVE-2015-1394 Photo Gallery Wordpress Plugin - Multiple XSS Vulnerabilities Version 1.2.8 ---------------------------------------------------------------- Product Information:...

Global Flash Galleries - swfupload.php Unauthenticated Image Upload Weakness

The global-flash-galleries WordPress plugin was affected by a swfupload.php Unauthenticated Image Upload Weakness security vulnerability...

WordPress Global Flash Galleries Plugin - Remote File Upload

Because of this vulnerability, attacker could use the affected system to Host files. Solution Update the plugin...

WordPress Global Flash Galleries Plugin - Remote File Upload

Because of this vulnerability, attacker could use the affected system to Host files. Solution Update the plugin...

WordPress Global Flash Galleries Plugin - SQL Injection

This plugin is prone to an SQL injection in popup.php id parameter. Solution Update the plugin...

WordPress Global Flash Galleries Plugin - Remote File Upload

Because of this vulnerability, attacker could use the affected system to Host files. Solution Update the plugin...

WordPress Global Flash Galleries Plugin - Remote File Upload

Because of this vulnerability, attacker could use the affected system to Host files. Solution Update the plugin...

ClickGallery Server SQL Injection Vulnerability

No description provided by source. ============================================================== ClickGallery Server--SQl iNjection Vulnerabilty ============================================================== Name : ClickGallery Server--SQl iNjection Vulnerabilty Date : july 9,2010 Critical Level...

MG2 0.5.1 Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15235/info MG2 is affected by an authentication bypass vulnerability. This issue can allow remote attackers to gain access to password protected image galleries. All versions of MG2 are considered to be vulnerable at the...

ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities Date : 12-january-2008 Risk : Medium Vendor URL : http://www.matteobinda.com/apg.php Google Dork : download this free gallery at matteobinda.com : allinurl: imgbig.asp?id= Found By : Ruben Ventura Pi...

WordPress global flash galleries插件远程文件上传漏洞

No description provided by source. Exploit : = = = = = = = = = Perl ! /usr/bin/perl use LWP; use HTTP::Request::Common; my $url, $file = @ARGV; my $ua = LWP::UserAgent-new; my $req = POST $url, ContentType = 'form-data', Content = name = $name, galleryselect = 1, Gallery ID popup.php Filedata =...

WordPress Global Flash Galleries File Upload

Exploit Title: WordPress global-flash-galleries Plugin Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 01/18/2014 Vendor Homepage: http://wordpress.org Software Link : http://downloads.wordpress.org/plugin/global-flash-galleries.zip Google dork:...

WordPress Plugin PhotoSmash Galleries - bwbps-uploader.php Arbitrary File Upload

WordPress Plugin PhotoSmash Galleries - bwbps-uploader.php Arbitrary File Upload source: https://www.securityfocus.com/bid/64173/info The PhotoSmash Galleries plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly...

WordPress PhotoSmash Galleries Plugin - Arbitrary File Upload

PhotoSmash Galleries plugin is prone to an arbitrary file upload vulnerability via "bwbps-uploader.php". It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...

WordPress Plugin PhotoSmash Galleries - 'bwbps-uploader.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/64173/info The PhotoSmash Galleries plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly validate file extensions before uploading them. An attacker may leverage this...

CVE-2012-2305

The CVE-2012-2305 issue affects the Drupal Node Gallery contributed module, specifically versions 6.x-3.1 and earlier. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of certain users when creating node galleries. The p...

PhotoSmash Galleries WordPress Plugin 'action' Parameter XSS Vulnerability

WordPress PhotoSmash Galleries Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...