Coppermine Photo Gallery has a code execution vulnerability

Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A code execution vulnerability exists in Coppermine Photo Gallery. The vulnerability allows...

CVE-2015-9445

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin-ajax.php in a unitegalleryajaxaction operation...

Sql injection

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters...

Sql injection

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...

CVE-2015-9445

CVE-2015-9445 affects the WordPress plugin ** Unite Gallery Lite** (before version 1.5). The issue is a combination of CSRF and SQL injection via wp-admin/admin-ajax.php in the operation unitegallery_ajax_action . This vulnerability is reported with a high impact (NVD CVSS v3.1 base score 8.8) an...

CVE-2015-9446

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...

CVE-2015-9446

CVE-2015-9446 affects the Unite Gallery Lite WordPress plugin (pre-1.5). The vulnerability is an SQL injection via data[galleryID] sent to wp-admin/admin-ajax.php, allowing the attacker to manipulate queries in the plugin’s context. Public references identify the issue in Unite Gallery Lite versi...

CVE-2015-9447

The CVE refers to the WordPress plugin Unite Gallery Lite prior to version 1.5. The vulnerability arises from CSRF and SQL injection via wp-admin/admin.php parameters named galleryid or id, indicating insufficient request validation that enables manipulation or unauthorized database queries. Seve...

CVE-2015-9447

The unite-gallery-lite plugin before 1.5 for WordPress has CSRF and SQL injection via wp-admin/admin.php galleryid or id parameters...

NextGEN Gallery Plugin for WordPress < 3.2.11 SQL Injection

The WordPress NextGEN Gallery Plugin installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input. A remote attacker can exploit this issue to manipulate SQL queries, resulting in the disclosure of sensitive information and...

Photo Gallery Plugin for WordPress < 1.5.31 SQL Injection

The WordPress Photo Gallery Plugin installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input. A remote attacker can exploit this issue to manipulate SQL queries, resulting in the disclosure of sensitive information and modificati...

WordPress zm-gallery plugin SQL injection vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in version 1.0 of the WordPress zm-gallery plugin. The vulnerability stem...

CVE-2016-10940

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter...

CVE-2016-10940

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter...

Sql injection

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter...

CVE-2016-10940

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter...

CVE-2016-10940

CVE-2016-10940 refers to the WordPress plug‑in zm-gallery 1.0, which is vulnerable to SQL injection through the order parameter. The Nuclei template and related sources describe the condition as a SQL injection that could allow an attacker to execute arbitrary SQL commands, potentially exposing o...

WordPress WP Social Feed Gallery Plugin < 2.4.8 Authentication Bypass Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113508";...

WordPress Photo Gallery 1.5.34 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications...

WordPress Plugin Photo Gallery 1.5.34 - SQL Injection

WordPress Plugin Photo Gallery 1.5.34 - SQL Injection Exploit Title: WordPress Plugin Photo Gallery by 10Web Add new and in add galleries / Gallery groups. GET request going with parameter albumid is vulnerable to Time Based Blind SQL injection. Following is the POC, 1...