Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Photo Gallery plugin before 1.2.11 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the 1 sortby, 2 sortorder, 3 itemsview, 4 dir, 5 clipboardtask, 6 clipboardfiles, 7 clipboardsrc, or 8 clipboarddes...

CVE-2015-1394

The CVE-2015-1394 entry corresponds to multiple XSS vulnerabilities in the WordPress plugin Photo Gallery (before 1.2.11). The vulnerability allows remote authenticated users to inject arbitrary JavaScript/HTML via parameters (sort_by, sort_order, items_view, dir, clipboard_task, clipboard_files,...

CVE-2010-4815

Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution...

Input validation

Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution...

CVE-2010-4815

Coppermine gallery before 1.4.26 has an input validation vulnerability that allows for code execution...

CVE-2010-4815

CVE-2010-4815 affects Coppermine Gallery prior to version 1.4.26. The vulnerability is an input validation flaw that can lead to code execution. Affected component: Coppermine Gallery (PHP-based web gallery). Root cause: improper input validation in the application, enabling arbitrary code execut...

CVE-2020-8119

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app...

Authorization

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app...

CVE-2020-8119

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app...

Exploit for SQL Injection in Imagely Nextgen_Gallery

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Authent...

CVE-2013-0291

NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability...

CVE-2013-0291

CVE-2013-0291 concerns the WordPress plugin NextGEN Gallery (versions 1.9.10 and 1.9.11). Multiple connected sources confirm a Path Disclosure vulnerability , i.e., exposure of sensitive server paths through the plugin. OpenVAS lists the affected scope as WordPress NextGEN Gallery Plugin 1.9.10

CVE-2013-0291

NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability...

WordPress Portfolio Gallery – Image Gallery plugin <= 1.1.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by WPScan Team in WordPress Portfolio Gallery – Image Gallery plugin versions = 1.1.2. Solution Update the WordPress Portfolio Gallery – Image Gallery plugin to the latest available version at least 1.1.3...

WordPress Portfolio Gallery – Image Gallery plugin <= 1.1.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScan Team in WordPress Portfolio Gallery – Image Gallery plugin versions = 1.1.2. Solution Update the WordPress Portfolio Gallery – Image Gallery plugin to the latest available version at least 1.1.3...

CVE-2012-4919

Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability...

CVE-2012-4919

Gallery Plugin1.4 for WordPress has a Remote File Include Vulnerability...

CVE-2012-4919

The CVE-2012-4919 entry applies to the WordPress Gallery Plugin (Gallery Plugin for WordPress). The vulnerability is a Remote File Inclusion via the load parameter of the update_order.php script, caused by insufficient input validation. This allows an unauthenticated, remote attacker to include a...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...