WordPress WP-DreamworkGallery 2.3 CSRF / Shell Upload

Exploit Title : WordPress WP-DreamworkGallery Plugins 2.3 CSRF Shell Upload Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 05/03/2019 Vendor Homepage : wordpress.org wpslideshow.com Software Download Link : downloads.wordpress.org/plugin/wp-dreamworkgallery.zip...

WordPress NextGEN Gallery plugin <= 3.1.6 - Authenticated Option Update vulnerability (Fremius Library security issue)

Authenticated Option Update vulnerability Fremius Library security issue found in WordPress NextGEN Gallery plugin versions = 3.1.6. Solution Update the WordPress NextGEN Gallery plugin to the latest available version at least 3.1.7...

WordPress Image Photo Gallery Final Tiles Grid plugin <= 3.3.52 - Authenticated Option Update vulnerability (Fremius Library security issue)

Authenticated Option Update vulnerability Fremius Library security issue found in WordPress Image Photo Gallery Final Tiles Grid plugin versions = 3.3.52. Solution Update the WordPress Image Photo Gallery Final Tiles Grid plugin to the latest available version at least 3.3.57...

SQL Injection Vulnerability in the Frontend of Gallery 27.0, a Qixing Image & Video Library

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. A SQL injection vulnerability exists in the frontend of Qixing Image & Video Library Gallery 27.0, which can be exploited by attackers to manipulate the database...

Joomla LightGallery 1.2.1 SQL Injection

Exploit Title : Joomla LightGallery Components 1.2.1 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : joompolitan.com Software Download Link : joompolitan.com/lightgallery.html...

SQL Injection Vulnerability in the Backend Us***_Ro***.aspx File of Qixing Image & Video Library Gallery v27.0

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. A SQL injection vulnerability exists in the backend UsRo.aspx file of Qixing Image & Video Gallery v27.0, which can be exploited by an attacker to obtain sensitive information from the database...

NextGen Gallery <= 3.1.5 - Authenticated PHP Object Injection

Legacy serialization handling allows unserialize of user input for low privileged users, leading to RCE...

SQL injection vulnerability in the co***.aspx and de***.aspx files in the frontend of Gallery, a Qixing image & video library.

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. SQL injection vulnerability exists in the frontend co.aspx and de.aspx files of the Qixing Image & Video Gallery, which can be exploited by attackers to obtain sensitive information from the database...

Multiple Cross-Site Scripting Vulnerabilities in Zenphoto

Zenphoto is a free photo gallery content management system developed by the Zenphoto team. The system manages images and supports multimedia such as audio and video. Zenphoto suffers from multiple cross-site scripting vulnerabilities. A remote attacker can exploit this vulnerability to inject...

Melbourne Fineart Gallery Australia 1.0 SQL Injection

Exploit Title : Melbourne Fineart Gallery Australia 1.0 SQL Injection Author Discovered By : KingSkrupellos Date : 30/12/2018 Vendor Homepage : melbournefineart.com.au Tested On : Windows Exploit Risk : Medium Version Information : 1.0 - Apache 2.0.53 - PHP 4.3.11 CWE : CWE-89 Improper...

Apple iOS (Combo) Password Bypass Vulnerability (CNVD-2018-26455)

Apple iOS is an operating system developed for mobile devices. A password bypass vulnerability exists in Apple iOS Combo. Allowing a local attacker to access sensitive desired data such as contacts, photo gallery or default apps...

Apple iOS (Combo) Password Bypass Vulnerability

Apple iOS is an operating system developed for mobile devices. A password bypass vulnerability exists in Apple iOS Combo. It allows local attackers to access sensitive desirable data such as contacts, photo gallery, or default apps...

Joomla! JE Photo Gallery 1.1 SQL Injection

Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection Dork: N/A Date: 2018-11-26 Exploit Author: Ihsan Sencan Vendor Homepage: https://joomlaextensions.co.in Software Link: http://joomlaextensions.co.in/download/1387375463JE%20PhotoGallery%20%20J-%203.0%20.zip Version: 1.1 Categor...

Joomla! Component JE Photo Gallery 1.1 - 'categoryid' SQL Injection

Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection Dork: N/A Date: 2018-11-26 Exploit Author: Ihsan Sencan Vendor Homepage: https://joomlaextensions.co.in Software Link: http://joomlaextensions.co.in/download/1387375463JE%20PhotoGallery%20%20J-%203.0%20.zip Version: 1.1 Categor...

Joomla JE Photo Gallery 1.1 Component - categoryid SQL Injection Exploit

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: https://joomlaextensions.co.in Software Link:...

arthunt-gallery.com XSS vulnerability

Open Bug Bounty ID: OBB-698751 Description| Value ---|--- Affected Website:| arthunt-gallery.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...

Slideshow Gallery <= 1.6.8 - XSS and SQLi

The Slideshow Gallery WordPress plugin was affected by a XSS and SQLi security vulnerability...

Joomla Component Responsive eXtro jQuery Gallery 'filter_category' parameter SQL injection vulnerability

eXtro Responsive Gallery creates fully responsive galleries based on images stored in the server catalog. The module also creates optimized preview images based on settings. A SQL injection vulnerability exists in the 'filtercategory' parameter in Joomla Component Responsive eXtro jQuery Gallery...

Joomla Responsive eXtro jQuery Gallery 2.1.0 Component - filter_category SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla Component Responsive eXtro jQuery Gallery 2.1.0 - 'filtercategory' SQL Injection Exploit Author: Özkan Mustafa Akkuş AkkuS Contact: https://pentest.com.tr Vendor Homepage: https://extro.media/ Software Link:...

Nextcloud: Gallery: No feedback for invalid password

CVSS ---- Low 3.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N Description ----------- The Gallery plugin does not inform a user when password-protecting a file failed in combination with the Password Policy plugin. Because of this, files that the user will rightfully assume to be...