11855 matches found
CVE-2015-5682
upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to the targetDir variable...
geoweb.uwyo.edu XSS vulnerability
Vulnerable URL: http://geoweb.uwyo.edu/GEOL3600/ImageGallery/industrialminerals-dia.asp?callNumber=1%3C!%27/!%22/!%27/%22/--!%3E%3CInput/Autofocus%20/;%20Onfocus=confirmOPENBUGBOUNTY%20//%3E%3CSvg%3E= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017...
Stored XSS in Gallery application (NC-SA-2017-010)
A JavaScript library used by Nextcloud for sanitizing untrusted user-input suffered from a XSS vulnerability caused by a behaviour change in Safari 10.1 and 10.2.Note that Nextcloud employs a strict Content-Security-Policy preventing exploitation of this XSS issue on modern web browsers...
WordPress Web-Dorado Gallery plugin 1.3.29 - SQL Injection vulnerability
SQL injection vulnerability found in WordPress Web-Dorado Gallery plugin version 1.3.29 by DefenceCode Solution Update plugin to the latest possible version...
WordPress WebDorado Gallery 1.3.29 Plugin - SQL Injection Vulnerability
Exploit for php platform in category web applications Source: http://www.defensecode.com/advisories/DC-2017-02-011WordPressWebDoradoGalleryPluginAdvisory.pdf DefenseCode ThunderScan SAST Advisory WordPress WebDorado Gallery Plugin - SQL Injection Vulnerability Advisory ID: DC-2017-02-011 Software...
WordPress Plugin WebDorado Gallery 1.3.29 - SQL Injection
WordPress Plugin WebDorado Gallery 1.3.29 - SQL Injection Source: http://www.defensecode.com/advisories/DC-2017-02-011WordPressWebDoradoGalleryPluginAdvisory.pdf DefenseCode ThunderScan SAST Advisory WordPress WebDorado Gallery Plugin - SQL Injection Vulnerability Advisory ID: DC-2017-02-011...
WordPress Plugin WebDorado Gallery 1.3.29 - SQL Injection
Source: http://www.defensecode.com/advisories/DC-2017-02-011WordPressWebDoradoGalleryPluginAdvisory.pdf DefenseCode ThunderScan SAST Advisory WordPress WebDorado Gallery Plugin - SQL Injection Vulnerability Advisory ID: DC-2017-02-011 Software: WordPress WebDorado Gallery Plugin Software Language...
Photo Gallery by WD <= 1.3.35 - Authenticated SQL Injection
http://www.defensecode.com/advisories/DC-2017-02-011WordPressWebDoradoGalleryPluginAdvisory.pdf http://www.vulnerablesite.com/wp-admin/admin-ajax.php?action=addAlbumsGalleries&albumid=0%20AND%20SELECT%20%20FROM%20SELECTSLEEP5VvZV&width=700&height=550&bwgitemsperpage=20&bwgnonce=b939983df9&TBifram...
NextGEN Gallery geo <= 1.0 - Unauthenticated PHP Object Injection
The plugin nextgen-gallery-geo insecurely trusts serialized data submitted over AJAX requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. The original researcher notified the WordPress Plugins team. PoC Attack is exploitable over AJAX calls sites with...
NextGEN Gallery geo <= 1.0 - Unauthenticated PHP Object Injection
The plugin nextgen-gallery-geo insecurely trusts serialized data submitted over AJAX requests. This opens up the site to a PHP object injection vulnerability potential exploit vector. The original researcher notified the WordPress Plugins team. Attack is exploitable over AJAX calls sites with the...
Nextcloud: Stored XSS in Gallery application (NC-SA-2017-010)
Stored XSS in Gallery application NC-SA-2017-010 Risk level: Low CVSS v3 Base Score: 3 AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N CWE: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' CWE-79 Description A JavaScript library used by Nextcloud for sanitizing untrusted...
milfordbaptistfellowship.org XSS vulnerability
Vulnerable URL: http://www.milfordbaptistfellowship.org/gallery//index.php?jump-menu= " Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:|...
Coppermine Gallery Directory Traversal Vulnerability
Coppermine Photo Gallery is a web-based album management system. A directory traversal vulnerability exists in the Coppermine Photo Gallery page "piceditor.php", which can be exploited by an attacker to traverse directory files and obtain sensitive information...
Coppermine Gallery 1.5.44 Directory Traversal
Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. A...
WordPress Tribulant Slideshow Gallery Plugin Cross-Site Scripting Vulnerability
Tribulant Slideshow Gallery is an application plugin available on the official WordPress Store that provides JavaScript-based sliding photo albums. A cross-site scripting vulnerability exists in the WordPress Tribulant Slideshow Gallery plugin where the Gallerymessage parameter submitted to the...
WordPress Robo Gallery plugin <= 2.0.15 - Privilege Escalation Vulnerability
WordPress Robo Gallery plugin Privilege Escalation Vulnerability exists in 2.0.15 version. It doesn't check if the current user is administrator so any logged in user can reset allery’s view count. Solution Update the plugin...
Slideshow Gallery <= 1.6.5 - Multiple Authenticated Cross-Site Scripting (XSS)
The Slideshow Gallery WordPress plugin was affected by a Multiple Authenticated Cross-Site Scripting XSS security vulnerability. http://vulnerablesite.com/wp-admin/admin.php?page=slideshowgalleries&method=view&id=1%5C%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...
Slideshow Gallery <= 1.6.5 - Multiple Authenticated Cross-Site Scripting (XSS)
The Slideshow Gallery WordPress plugin was affected by a Multiple Authenticated Cross-Site Scripting XSS security vulnerability. PoC http://vulnerablesite.com/wp-admin/admin.php?page=slideshowgalleries=view=1%5C%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...