galerie-leonhard.at XSS vulnerability

Open Bug Bounty ID: OBB-363923 Description| Value ---|--- Affected Website:| galerie-leonhard.at Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

WordPress Best Gallery Albums Plugin Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.Best Gallery Albums Plugin is one of the image management plugin. A cross-site scripting vulnerability exists in...

paleospot.com XSS vulnerability

Vulnerable URL: http://www.paleospot.com/galerierubrique.php?rub=8"'--!alert/Y4R4G/...

clubs.uci.edu XSS vulnerability

Open Bug Bounty ID: OBB-331730 Description| Value ---|--- Affected Website:| clubs.uci.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Gallery Bank Plugin < 3.0.70 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.112071";...

classicbuilderstx.com XSS vulnerability

Vulnerable URL: http://www.classicbuilderstx.com/gallery/index.php?catid=13'"4=4 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 06.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 17593366 VIP website status:| No Coordinated...

doms.lv XSS vulnerability

Open Bug Bounty ID: OBB-325955 Description| Value ---|--- Affected Website:| doms.lv Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

ledovapraha.cz XSS vulnerability

Open Bug Bounty ID: OBB-325940 Description| Value ---|--- Affected Website:| ledovapraha.cz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-8758

Cross-site scripting XSS vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitrary web script or HTML via the orderid parameter in the galleryalbumsorting page to wp-admin/admin.php...

Cross site scripting

Cross-site scripting XSS vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitrary web script or HTML via the orderid parameter in the galleryalbumsorting page to wp-admin/admin.php...

CVE-2014-8758

Cross-site scripting XSS vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress allows remote attackers to inject arbitrary web script or HTML via the orderid parameter in the galleryalbumsorting page to wp-admin/admin.php...

CVE-2014-8758

CVE-2014-8758: Cross-site scripting in WordPress Best Gallery Albums Plugin (before 3.0.70). The vulnerability is triggered via the order_id parameter in the gallery_album_sorting page (wp-admin/admin.php), allowing remote injection of script/HTML. Affected: Best Gallery Albums Plugin for WordPre...

bollinger.ch XSS vulnerability

Vulnerable URL: http://www.bollinger.ch/pages/en/gallery.php?cat=/Palmenholz%27%27%22%3E%3Cimg%20src=x%20onerror=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

in2.cz XSS vulnerability

Vulnerable URL: http://www.in2.cz/gallery.php/'%22--!%3E%20%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E?lang=en=shop Details: Description| Value ---|--- Patched:| No Latest check for patch:| 01.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown ...

WordPress Flickr Gallery plugin <=1.5.2 - Unauthenticated PHP Object Injection vulnerability

Unauthenticated PHP Object Injection vulnerability found by Matt Barry WordFence in WordPress Appointments plugin versions =1.5.2. Solution Update the WordPress Flickr Gallery plugin to the latest available version at least 1.5.3...

VulnCheck KEV: CVE-2017-20207

The Flickr Gallery plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.5.2 via deserialization of untrusted input from the pager parameter. This allows unauthenticated attackers to inject a PHP Object. Attackers were actively exploiting this vulnerabilit...

Flickr Gallery <= 1.5.2 - Unauthenticated PHP Object Injection

The flickr-gallery WordPress plugin was affected by an Unauthenticated PHP Object Injection security vulnerability...

exclusivelyauctions.com XSS vulnerability

Open Bug Bounty ID: OBB-317750 Description| Value ---|--- Affected Website:| exclusivelyauctions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2017-14125

SQL injection vulnerability in the Responsive Image Gallery plugin before 1.2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the "id" parameter in an addedittheme task in the wpdevartgallerythemes page to wp-admin/admin.php...

WordPress Responsive Image Gallery, Gallery Album plugin <=1.2.0 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by Manuel García Cárdenas in WordPress Responsive Image Gallery, Gallery Album version 1.2.0 and earlier versions. Solution Update the Responsive Image Gallery, Gallery Album plugin to the latest available version at least 1.2.1...