Slideshow Gallery <= 1.6.5 - Multiple Authenticated Cross-Site Scripting (XSS)

The Slideshow Gallery WordPress plugin was affected by a Multiple Authenticated Cross-Site Scripting XSS security vulnerability. PoC http://vulnerablesite.com/wp-admin/admin.php?page=slideshowgalleries=view=1%5C%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E...

e107 CMS 2.1.4 - Cross-Site Request Forgery

...

Image Gallery with Slideshow <= 1.5.2 - Multiple XSS and SQL Injection

The plugin is still affected and has been closed...

NIGHT GALLERY 2017 event.php parameter id SQL injection vulnerability

No description provided by source...

ownCloud Server and Nextcloud Server Cross-Site Scripting Vulnerabilities

ownCloud is a free and open source personal cloud storage solution from German company ownCloud. nextcloud is an open source self-hosted file synchronization and sharing communication application platform. ownCloud Server and Nextcloud Server are both a server version of one of them. A cross-site...

Nextcloud Multiple Vulnerabilities - Linux

Nextcloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nextcloud:nextcloudserver"; if...

CVE-2016-9466

Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message,...

Cross site scripting

Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message,...

CVE-2016-9466

CVE-2016-9466 is a reflected XSS in the Gallery application affecting Nextcloud Server before 10.0.1 and ownCloud Server before 9.0.6, with further versions 9.1.2 affected. The issue arises from the Gallery app not properly sanitizing exception messages generated by the Nextcloud/ownCloud server;...

CVE-2016-9466

Nextcloud Server before 10.0.1 & ownCloud Server before 9.0.6 and 9.1.2 suffer from Reflected XSS in the Gallery application. The gallery app was not properly sanitizing exception messages from the Nextcloud/ownCloud server. Due to an endpoint where an attacker could influence the error message,...

WordPress NextGEN Gallery suffers from a SQL Injection Vulnerability

NextGEN Gallery is a WordPress gallery plugin. A SQL injection vulnerability exists in NextGEN Gallery 2.1.77 and earlier versions, which can be exploited by attackers to obtain sensitive database information...

Gr8 Gallery Script - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Gr8 Gallery Script - SQL Injection Google Dork: N/A Date: 24.03.2017 Vendor Homepage: http://gr8script.com/ Software: http://gr8script.com/gr8gallery.php Demo: http://www.gr8script.com/gr8gallery/ Version: N/A Tested on: Win7 x6...

Gr8 Gallery Script - SQL Injection

Gr8 Gallery Script - SQL Injection Exploit Title: Gr8 Gallery Script - SQL Injection Google Dork: N/A Date: 24.03.2017 Vendor Homepage: http://gr8script.com/ Software: http://gr8script.com/gr8gallery.php Demo: http://www.gr8script.com/gr8gallery/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

Gr8 Gallery Script - SQL Injection

Exploit Title: Gr8 Gallery Script - SQL Injection Google Dork: N/A Date: 24.03.2017 Vendor Homepage: http://gr8script.com/ Software: http://gr8script.com/gr8gallery.php Demo: http://www.gr8script.com/gr8gallery/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan Author...

Gr8 Gallery Script SQL Injection

Exploit Title: Gr8 Gallery Script - SQL Injection Google Dork: N/A Date: 24.03.2017 Vendor Homepage: http://gr8script.com/ Software: http://gr8script.com/gr8gallery.php Demo: http://www.gr8script.com/gr8gallery/ Version: N/A Tested on: Win7 x64, Kali Linux x64 Exploit Author: Ihsan Sencan Author...

Wordpress Photo Gallery Plugin Arbitrary File Download Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. An arbitrary file download vulnerability exists in the Wordpress Photo Gallery plugin, which allows attackers to exploit the...

Wordpress Plugin Photo Gallery v3. 0 - arbitrary File Download

Vulnerability title: Wordpress Plugin Photo Gallery v3. 0 - arbitrary File Download Vulnerability type: arbitrary File Download Vulnerability impact: Photo Gallery v3. 0 Vulnerabilities exist in the url: http://localhost/PLUGINPATH/macdownload.php Vulnerability details:...

WordPress Plugin Flash Rotator Gallery SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers set up a personal blog site.Flash Rotator Gallery is one of the plug-ins to add flash effects to the picture. A SQL injection vulnerability exist...

WordPress Flash Rotator Gallery plugin SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress plugin Flash Rotator Gallery - SQL injection Date: 2017-03-12 Exploit Author: malwrforensics Vendor Homepage: http://www.webpsilon.com/wordpress-plugins/flash-rotator-gallery/ Software Link:...

WordPress PICA Photo Gallery Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Mail Masta aka mail-masta is one of the email plug-ins. A SQL injection vulnerability exists in the parameter aid i...