Design/Logic Flaw

The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...

Sql injection

The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action...

Joomla! JEXTN Video Gallery extension SQL injection vulnerability

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features . JEXTN Video Gallery extension is used in one of the video online sharing plug-ins. A SQL injection vulnerability exists in...

CVE-2017-17872

The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action...

CVE-2017-17872

The CVE-2017-17872 entry corresponds to a SQL Injection in the JEXTN Video Gallery extension for Joomla! (version 3.0.5). The vulnerability is exposed via the id parameter in the view=category action, allowing an attacker to inject SQL commands. Public references indicate an exploit exists (Explo...

yogastudiongotland.se XSS vulnerability

Open Bug Bounty ID: OBB-457675 Description| Value ---|--- Affected Website:| yogastudiongotland.se Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Piwigo Configuration Component Cross-Site Scripting Vulnerability

Piwigo is a set of web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing categories, tags, time, etc. Configuration component is a component for configuration. A cross-site scripting vulnerability exists in the Configuration...

WordPress mgl-instagram-gallery Plugin Cross Site Scripting Vulnerability

Exploit for php platform in category web applications + Title: WordPress mgl-instagram-gallery Plugin Cross Site Scripting XSS + Author: Mostafa Gharzi + Vendor Homepage: www.Wordpress.org , www.pluginu.com/mgl-instagram-gallery/ + Tested on: Windows 10 & Kali Linux + Vulnerable File:...

Cross site scripting

The Configuration component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via the gallerytitle parameter in an admin.php?page=configuration&section=main request. An attacker can exploit this to hijack a client's browser along with the data stored in it...

CVE-2017-17826

The Configuration component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via the gallerytitle parameter in an admin.php?page=configuration&section=main request. An attacker can exploit this to hijack a client's browser along with the data stored in it...

JEXTN Video Gallery 3.0.5 - SQL Injection, 3.0.5 ,SQL Injection

JEXTN Video Gallery 3.0.5 - SQL Injection, 3.0.5 ,SQL Injection...

Joomla! JEXTN Video Gallery 3.0.5 SQL Injection

Exploit Title: Joomla! Component JEXTN Video Gallery 3.0.5 - SQL Injection Dork: N/A Date: 13.12.2017 Vendor Homepage: http://jextn.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/jextn-video-gallery/ Version: 3.0.5 Category: Webapps Tested on:...

Gallery Bank Plugin for WordPress < 2.0.20 XSS

According to its self-reported version, the Gallery Bank Plugin for WordPress running on the remote web server is prior to 2.0.20. It is, therefore, affected by multiple reflected cross-site scripting vulnerabilities. A remote attacker can exploit these issues, via a specially crafted request, to...

Joomla JEXTN Video Gallery 3.0.5 Component - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JEXTN Video Gallery 3.0.5 - SQL Injection Dork: N/A Date: 13.12.2017 Vendor Homepage: http://jextn.com/ Software Link:...

Joomla! Component JEXTN Video Gallery 3.0.5 - id SQL Injection

Joomla! Component JEXTN Video Gallery 3.0.5 - id SQL Injection Exploit Title: Joomla! Component JEXTN Video Gallery 3.0.5 - SQL Injection Dork: N/A Date: 13.12.2017 Vendor Homepage: http://jextn.com/ Software Link:...

Joomla! Component JEXTN Video Gallery 3.0.5 - 'id' SQL Injection

Exploit Title: Joomla! Component JEXTN Video Gallery 3.0.5 - SQL Injection Dork: N/A Date: 13.12.2017 Vendor Homepage: http://jextn.com/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/multimedia-players/jextn-video-gallery/ Version: 3.0.5 Category: Webapps Tested on:...

Flickr Gallery Plugin for WordPress < 1.5.3 PHP Object Injection

According to its self-reported version, the Flickr Gallery Plugin for WordPress running on the remote web server is prior to 1.5.3. It is, therefore, affected by a PHP object injection vulnerability. An unauthenticated, remote attacker can exploit this to inject PHP objects and execute arbitrary...

media.artgallery.yale.edu XSS vulnerability

Open Bug Bounty ID: OBB-448493 Description| Value ---|--- Affected Website:| media.artgallery.yale.edu Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

rockportusa.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-399515 Description| Value ---|--- Affected Website:| rockportusa.com Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...

Brilliant Gallery - Highly critical - Multiple Vulnerabilities - SA-CONTRIB-2017-079

This module enables you to display any number of galleries based on images located in the files folder. The module doesn't sufficiently sanitize various database queries which may allow attackers to craft requests resulting in an SQL injection vulnerability. This vulnerability could be exploited...