WordPress Responsive Image Gallery, Gallery Album plugin <=1.2.0 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability found by Manuel García Cárdenas in WordPress Responsive Image Gallery, Gallery Album version 1.2.0 and earlier versions. Solution Update the Responsive Image Gallery, Gallery Album plugin to the latest available version at least 1.2.1...

nightgallery.ca XSS vulnerability

Vulnerable URL: http://www.nightgallery.ca/artist.php?id=13'"6 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 889254 VIP website status:| No Coordinated Disclosure Timeline: Description| Value ---|---...

WordPress Responsive Image Gallery 1.1.8 SQL Injection Vulnerability

WordPress Responsive Image Gallery plugin version 1.1.8 suffers from a remote SQL injection vulnerability. ============================================= - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2017-14125 ===========================================...

tegenwind.eu XSS vulnerability

Vulnerable URL:...

seattlestar.net XSS vulnerability

Vulnerable URL:...

winzerhof-kuenster.de XSS vulnerability

Vulnerable URL:...

uerigetreff-muelheim.de XSS vulnerability

Vulnerable URL: http://www.uerigetreff-muelheim.de/image/gallerybiergarten/svcore/full.html?bg=transparent%22%3E%3Csvg/onload=alertdocument.domain%3E=http%3A%2F%2Fwww.uerigetreff-muelheim.de%2Fimage%2Fgallerybiergarten%2Fdegallery.xml=true=true=false=true=true=true=%23fff=%23fff=true=-1 Details:...

theo-zimmermann.de XSS vulnerability

Open Bug Bounty ID: OBB-300649 Description| Value ---|--- Affected Website:| theo-zimmermann.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

mapaving.co.uk XSS vulnerability

Vulnerable URL: http://www.mapaving.co.uk/gallery/svcore/full.html?bg="transparent=http://www.mapaving.co.uk/gallery/gallery.xml=http://www.mapaving.co.uk/gallery/=http://www.mapaving.co.uk/gallery/images/=http://www.mapaving.co.uk/gallery/thumbs/=true=true=false=true=true=true=fff=fff=true=-1...

rozenbogen.nl XSS vulnerability

Vulnerable URL: http://www.rozenbogen.nl/Gallery/Berceaux/svcore/full.html?bg="transparent=http://www.rozenbogen.nl/Gallery/Berceaux/gallery.xml=http://www.rozenbogen.nl/Gallery/Berceaux/images/=http://www.rozenbogen.nl/Gallery/Berceaux/thumbs/=false=true=false=true=true=true=-1=Berceaux Details:...

restaurantlepenlys.com XSS vulnerability

Vulnerable URL: http://www.restaurantlepenlys.com/svcore/full.html?bg="=http://www.restaurantlepenlys.com/gallery.xml=http://www.restaurantlepenlys.com/=http://www.restaurantlepenlys.com/images/=http://www.restaurantlepenlys.com/thumbs/=true=true=false=true=true=true=fff=fff=true=-1 Details:...

WordPress Responsive Image Gallery 1.1.8 SQL Injection

============================================= MGC ALERT 2017-006 - Original release date: September 01, 2017 - Last revised: September 25, 2017 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2017-14125 ============================================= I...

elimu.lab.mcgill.ca XSS vulnerability

Vulnerable URL: http://elimu.lab.mcgill.ca/gallery/svcore/full.html?bg=FFFFFF%22%3E%3Csvg/onload=alertdocument.domain%3E=http%3A%2F%2Felimu.lab.mcgill.ca%2Fgallery%2Fgallery.xml=http://elimu.lab.mcgill.ca/gallery/=true=true=false=true=true=true=%23fff=%23fff=true=-1 Details: Description| Value...

WordPress Photocrati NextGEN Gallery Plugin File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Photocrati NextGEN Gallery plugin is one of the image management plugin. A security vulnerability exists in the...

Wordpress plugin image-gallery-with-slideshow SQL injection vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin image-gallery-with-slideshow SQL injection vulnerability, the vulnerability stems from the program failing t...

Anblik WordPress image-gallery-with-slideshow SQL Injection Vulnerability

Anblik WordPress image-gallery-with-slideshow is a slideshow plugin for WordPress developed by Anblik Web Design India. A SQL injection vulnerability exists in the image-gallery-with-slideshow/adminsetting.php file in Anblik WordPress image-gallery-with-slideshow version 1.5.2. A remote attacker...

WordPress wordpress-gallery-transformation SQL Injection Vulnerability

WordPress wordpress-gallery-transformation is a website wallpaper plugin for WordPress. WordPress wordpress-gallery-transformation version 1.0 in . /wordpress-gallery-transformation/gallery.php in version 1.0 contains a SQL injection vulnerability that stems from the program failing to filter the...

Wordpress plugin image-gallery-with-slideshow cross-site scripting vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin image-gallery-with-slideshow cross-site scripting vulnerability. A remote attacker can exploit this...

Anblik WordPress image-gallery-with-slideshow SQL Injection Vulnerability

Anblik WordPress image-gallery-with-slideshow is a slideshow plugin for WordPress developed by Anblik Web Design India. A SQL injection vulnerability exists in the image-gallery-with-slideshow/adminsetting.php file in Anblik WordPress image-gallery-with-slideshow version 1.5.2. A remote attacker...

countrylion.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-295922 Description| Value ---|--- Affected Website:| countrylion.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...