Cross site scripting

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 ...

CVE-2023-3538 SimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scripting

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 ...

CVE-2023-3538 SimplePHPscripts Photo Gallery PHP URL Parameter preview.php cross site scripting

A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php of the component URL Parameter Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. VDB-233290 ...

CVE-2023-3538

CVE-2023-3538 affects SimplePHPscripts Photo Gallery PHP 2.0. The vulnerability is in the URL Parameter Handler’s /preview.php file and causes cross-site scripting when user-controlled input is processed, with remote initiation described. Exploitation details, affected versions beyond 2.0, and co...

PT-2023-25209 · Unknown · Simplephpscripts Photo Gallery

Name of the Vulnerable Software and Affected Versions: SimplePHPscripts Photo Gallery PHP version 2.0 Description: A problematic vulnerability was found in the URL Parameter Handler component of the file /preview.php. This issue leads to cross site scripting and can be initiated remotely...

SimplePHPscripts Photo Gallery PHP 跨站脚本漏洞

Simple Photo Gallery is a simple gallery web application. A cross-site scripting vulnerability exists in SimplePHPscripts Photo Gallery PHP version 2.0, which stems from a problem with the file /preview.php that can lead to cross-site scripting...

WordPress Video Gallery Plugin <= 1.3.12 is vulnerable to Cross Site Scripting (XSS)

Software Video Gallery Type Plugin Vulnerable versions = 1.3.12 Fixed in 1.3.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-25477 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 69f2f538600b Credits Abdi Pranata Required...

CVE-2022-48513

Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2022-48513

Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access...

Out-of-bounds

Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2022-48513

CVE-2022-48513 describes a vulnerability in the Gallery module where identity verification can be bypassed, potentially enabling out-of-bounds access. The NVD/NIST entry notes a critical severity (CVSS v3.1, 9.8), with network attack vector, no user interaction, and no privileges required, and it...

CVE-2022-48513

Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access...

CVE-2022-48513

Vulnerability of identity verification being bypassed in the Gallery module. Successful exploitation of this vulnerability may cause out-of-bounds access...

PT-2023-15839 · Gallery · Gallery

Name of the Vulnerable Software and Affected Versions: Gallery module affected versions not specified Description: The issue concerns a vulnerability in the identity verification process of the Gallery module, which can be bypassed. This could potentially lead to out-of-bounds access if...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from an authentication bypass via spoofing vulnerability in the Gallery module. An attacker...

CVE-2021-4384

The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the loadimagesthumbnail and editgallery functions. This makes it possible for unauthenticat...

CVE-2021-4384

The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the loadimagesthumbnail and editgallery functions. This makes it possible for unauthenticat...

Cross site request forgery (csrf)

The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the loadimagesthumbnail and editgallery functions. This makes it possible for unauthenticat...

CVE-2021-4384 WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypass

The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the loadimagesthumbnail and editgallery functions. This makes it possible for unauthenticat...

CVE-2021-4384 WordPress Photo Gallery – Image Gallery <= 1.0.6 - Cross-Site Request Forgery Bypass

The WordPress Photo Gallery – Image Gallery plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the loadimagesthumbnail and editgallery functions. This makes it possible for unauthenticat...