Lucene search
+L

11741 matches found

CNNVD
CNNVD
added 2025/07/04 12:00 a.m.8 views

WordPress plugin Video Gallery Block 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

6.5CVSS5.6AI score0.00159EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/07/04 12:00 a.m.9 views

WordPress plugin Pixelating image slideshow gallery 注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Pixelating...

8.5CVSS7.5AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/04 12:00 a.m.12 views

PT-2025-27874 · Bplugins · Bplugins Video Gallery Block

Name of the Vulnerable Software and Affected Versions: bPlugins Video Gallery Block versions 1.1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This enables attackers to inject...

6.5CVSS5.2AI score0.00159EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/07/04 12:00 a.m.11 views

PT-2025-27880 · Unknown · Cybio Gallery Widget

Name of the Vulnerable Software and Affected Versions: cybio Gallery Widget versions 1.2.1 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, also known as 'SQL Injection'. This allows for SQL Injection in the cybio Gallery...

8.5CVSS7.4AI score0.00252EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/04 12:00 a.m.6 views

WordPress plugin iFrame Images Gallery SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS7.6AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/07/04 12:00 a.m.10 views

PT-2025-27923 · Unknown · Fw Gallery

Name of the Vulnerable Software and Affected Versions: FW Gallery versions n/a through 8.0.0 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For FW Gallery versions n/a through 8.0.0, consider restricti...

10CVSS6.5AI score0.00338EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/04 12:00 a.m.10 views

WordPress plugin FW Gallery 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

10CVSS6.8AI score0.00338EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/07/04 12:00 a.m.10 views

PT-2025-27888 · Unknown · Gopiplus Iframe Images Gallery

Name of the Vulnerable Software and Affected Versions: gopiplus iFrame Images Gallery versions prior to 9.0 Description: The issue is related to the improper neutralization of special elements used in an SQL command, which allows for SQL injection. This is a problem where an attacker can inject...

8.5CVSS7.4AI score0.00252EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/04 12:00 a.m.6 views

WordPress plugin Gallery Widget SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

8.5CVSS7.6AI score0.00252EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/07/01 4:07 a.m.23 views

CVE-2025-6843

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been classified as critical. Affected is an unknown function of the file /upload-photo.php. The manipulation of the argument fileimg leads to unrestricted upload. It is possible to launch the attack remotely. The exploit...

9.8CVSS7.2AI score0.00456EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/06/29 2:26 p.m.8 views

CVE-2025-53257

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Serhii Pasyuk Gmedia Photo Gallery grand-media allows PHP Local File Inclusion.This issue affects Gmedia Photo Gallery: from n/a through = 1.23.0...

7.5CVSS5.9AI score0.0061EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/06/29 12:06 p.m.8 views

CVE-2025-49416

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Fastw3b LLC FW Gallery fw-gallery allows PHP Local File Inclusion.This issue affects FW Gallery: from n/a through = 8.0.0...

8.1CVSS5.9AI score0.00612EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/29 4:15 a.m.14 views

CVE-2025-6843

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been classified as critical. Affected is an unknown function of the file /upload-photo.php. The manipulation of the argument fileimg leads to unrestricted upload. It is possible to launch the attack remotely. The exploit...

9.8CVSS0.00456EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/29 4:15 a.m.20 views

CVE-2025-6843

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been classified as critical. Affected is an unknown function of the file /upload-photo.php. The manipulation of the argument fileimg leads to unrestricted upload. It is possible to launch the attack remotely. The exploit...

9.8CVSS5.5AI score0.00456EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/29 3:31 a.m.37 views

CVE-2025-6843

The CVE-2025-6843 entry concerns code-projects Simple Photo Gallery v1.0. The vulnerability is in an unknown function of the file /upload-photo.php, where manipulating the file_img parameter enables unrestricted file upload over the network and can be exploited remotely. Public disclosure of the ...

9.8CVSS7.3AI score0.00456EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/29 3:31 a.m.8 views

CVE-2025-6843 code-projects Simple Photo Gallery upload-photo.php unrestricted upload

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been classified as critical. Affected is an unknown function of the file /upload-photo.php. The manipulation of the argument fileimg leads to unrestricted upload. It is possible to launch the attack remotely. The exploit...

7.5CVSS7.3AI score0.00456EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/06/29 3:31 a.m.26 views

CVE-2025-6843 code-projects Simple Photo Gallery upload-photo.php unrestricted upload

A vulnerability was found in code-projects Simple Photo Gallery 1.0. It has been classified as critical. Affected is an unknown function of the file /upload-photo.php. The manipulation of the argument fileimg leads to unrestricted upload. It is possible to launch the attack remotely. The exploit...

7.5CVSS0.00456EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/06/29 12:00 a.m.11 views

PT-2025-27344 · Unknown · Code-Projects Simple Photo Gallery

Name of the Vulnerable Software and Affected Versions: code-projects Simple Photo Gallery version 1.0 Description: A critical issue was found in the code-projects Simple Photo Gallery. The problem is related to an unknown function of the file /upload-photo.php. The manipulation of the file img...

9.8CVSS7AI score0.00456EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/06/29 12:00 a.m.9 views

Code-Projects Simple Photo Gallery 安全漏洞

Code-Projects Simple Photo Gallery is a simple photo gallery system from Code-Projects open source. A security vulnerability exists in Code-Projects Simple Photo Gallery version 1.0, which stems from an unlimited upload due to incorrect manipulation of the parameter fileimg in file/upload-photo.p...

9.8CVSS7.4AI score0.00456EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/06/27 2:46 p.m.12 views

WordPress Gmedia Photo Gallery plugin <= 1.23.0 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by LVT-tholv2k in WordPress Plugin Gmedia Photo Gallery versions = 1.23.0...

7.5CVSS6.7AI score0.0061EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder