11774 matches found
Simple Image Gallery 注入漏洞
Simple Image Gallery Web App is a web-based application that can be managed by multiple users. Users can store their images in this web application. A security vulnerability exists in Simple Image Gallery v1.0 that stems from a Remote Code Execution RCE vulnerability...
CVE-2023-27040
CVE-2023-27040 affects Simple Image Gallery v1.0, with a remote code execution (RCE) vulnerability exploitable via the username parameter. Connected sources confirm the issue leads to high-impact outcomes (CONFIDENTIALITY, INTEGRITY, AVAILABILITY all at HIGH) and indicate network-level access wit...
WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software Slideshow Gallery Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-28497 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e4370ac72e5b Credits Rio Darmawan...
CVE-2023-27040
Simple Image Gallery v1.0 was discovered to contain a remote code execution RCE vulnerability via the username parameter...
WordPress Slideshow Gallery Plugin <= 1.7.6 is vulnerable to SQL Injection
Software Slideshow Gallery Type Plugin Vulnerable versions = 1.7.6 Fixed in 1.7.7 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2023-28491 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID 9644393e25c7 Credits minhtuanact Required privilege Administrator...
PT-2023-20913 · Unknown · Simple Image Gallery
Name of the Vulnerable Software and Affected Versions: Simple Image Gallery version 1.0 Description: The issue is related to a remote code execution RCE vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Simple Image Gallery version 1.0, as a...
CVE-2023-27040
Simple Image Gallery v1.0 was discovered to contain a remote code execution RCE vulnerability via the username parameter...
CVE-2023-1416
A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2023-1415
A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...
CVE-2023-1415
A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...
Sql injection
A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
Design/Logic Flaw
A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...
CVE-2023-1416 Simple Art Gallery adminHome.php sql injection
A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...
CVE-2023-1416
Affected software: Simple Art Gallery 1.0. The vulnerability exists in the function handling the adminHome.php file, where manipulation of the social_facebook parameter causes SQL injection. It can be exploited remotely and an exploit has been disclosed publicly (VDB-223128). The provided documen...
CVE-2023-1415 Simple Art Gallery adminHome.php sliderPicSubmit unrestricted upload
A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...
CVE-2023-1415
CVE-2023-1415 affects Simple Art Gallery 1.0. The vulnerability resides in sliderPicSubmit in adminHome.php, enabling unrestricted file uploads and remote initiation. Product is Software: Simple Art Gallery 1.0; Component: sliderPicSubmit (adminHome.php); Root cause: improper handling of uploads ...
CVE-2023-1415 Simple Art Gallery adminHome.php sliderPicSubmit unrestricted upload
A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file adminHome.php. The manipulation leads to unrestricted upload. The attack can be initiated remotely. VDB-223126 is the identifier assigned to...
CVE-2023-24726
Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page...