11845 matches found
WordPress Gallery Transformation plugin 1.0 - Blind SQL Injection vulnerability
Blind SQL Injection vulnerability found by Larry W. Cashdollar in WordPress Gallery Transformation plugin 1.0 version. SQL injection vulnerability lies in ./wordpress-gallery-transformation/gallery.php file, $jpic parameter passed into an SQL query unsanitized. Solution The plugin already removed...
Piwigo Plugin User Tag 0.9.0 - Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Exploit Title: Piwigo plugin User Tag , Persistent XSS Date: 10 Aug, 2017 Extension Version: 0.9.0 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=441 Exploit Author: Touhid M.Shai...
Piwigo Plugin User Tag 0.9.0 - Cross-Site Scripting
Exploit Title: Piwigo plugin User Tag , Persistent XSS Date: 10 Aug, 2017 Extension Version: 0.9.0 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=441 Exploit Author: Touhid M.Shaikh Contact: http://twitter.com/touhidshaikh22 Website:...
Piwigo Plugin User Tag 0.9.0 - Cross-Site Scripting
Piwigo Plugin User Tag 0.9.0 - Cross-Site Scripting Exploit Title: Piwigo plugin User Tag , Persistent XSS Date: 10 Aug, 2017 Extension Version: 0.9.0 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=441 Exploit Author: Touhid M.Shaikh...
velsvidyashram.com XSS vulnerability
Vulnerable URL: http://www.velsvidyashram.com/gallery-events2013.htm!prettyPhoto/0,%3Ca%20onclick=%22alert%27OPENBUGBOUNTY%27;%22%3E/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...
imoca.org XSS vulnerability
Vulnerable URL: https://www.imoca.org/en/gallery/1797-idefi-azimut-2016i.htm!prettyPhoto/0,/ Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 31.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 2590810 VIP websit...
bwcooperstown.com XSS vulnerability
Open Bug Bounty ID: OBB-272227 Description| Value ---|--- Affected Website:| bwcooperstown.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
bapujidental.edu XSS vulnerability
Vulnerable URL: http://www.bapujidental.edu/gallery.php?id=7%22%3E%3Cb%3E%3Cscript%3Ealert%281%29%3C/script%3E%3C/b%3E Details: Description| Value ---|--- Patched:| Verification in progress Latest check for patch:| 29.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...
littlefriends.co.uk XSS vulnerability
Open Bug Bounty ID: OBB-270664 Description| Value ---|--- Affected Website:| littlefriends.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
restauranteronghua.com XSS vulnerability
Vulnerable URL: http://restauranteronghua.com/wp-content/plugins/gallery-sequence/img.php?id=165=alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
teamchallengehourglass.com XSS vulnerability
Vulnerable URL: http://www.teamchallengehourglass.com/memberGallery.asp?programme=1"...
timekidspreschools.in XSS vulnerability
Vulnerable URL: https://timekidspreschools.in/photo-gallery-details.php?c=1010%22%3E%3Ch1%3EM0ns7er%3C/h1%3E%3Cscript%3Ealert%28document.cookie%29%3C/script%3E%3C/br%3E=1046=8=67 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.08.2017 Vulnerability type:| XSS...
dragboats.com XSS vulnerability
Vulnerable URL: http://www.dragboats.com/gallery/pictures.php?DriverID=1"...
israpost.com XSS vulnerability
Vulnerable URL: http://www.israpost.com/Community/gallery/album.php?AmountToShow=30foldersstate=841id=894〈=heb=1"...
smithcosmetic.com XSS vulnerability
Vulnerable URL: http://www.smithcosmetic.com/gallery.asp?bat=1"...
Design/Logic Flaw
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
CVE-2015-7898
Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service process crash...
Design/Logic Flaw
Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service process crash...