WordPress PICA Photo Gallery 1.0 Plugin - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin PICA Photo Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Demo:...

WordPress Plugin PICA Photo Gallery 1.0 - SQL Injection

WordPress Plugin PICA Photo Gallery 1.0 - SQL Injection Exploit Title: WordPress Plugin PICA Photo Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Demo:...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software:...

WordPress Plugin PICA Photo Gallery 1.0 - SQL Injection

Exploit Title: WordPress Plugin PICA Photo Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Demo: http://www.apptha.com/demo/pica-photo-gallery Version: 1.0 Test...

WordPress Plugin Apptha Slider Gallery 1.0 - SQL Injection Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from SQL Injection vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

WordPress Mac Photo Gallery 3.0 Plugin - Arbitrary File Download Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Plugin Mac Photo Gallery v3.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/Mac-Photo-Gallery Demo:...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from Arbitrary File Download Vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download Vulnerability

WordPress Plugin Apptha Slider Gallery version 1.0 suffers from Arbitrary File Download Vulnerability found by Ihsan Sencan. Solution We were unable to find patched version of the plugin. The vendor still sales affected version 1.0 last checked on 2017.04.01...

WordPress Plugin Apptha Slider Gallery 1.0 - Arbitrary File Download

Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery Demo: http://www.apptha.com/demo/apptha-slider-galler...

WordPress Plugin Mac Photo Gallery 3.0 - Arbitrary File Download

Exploit Title: WordPress Plugin Mac Photo Gallery v3.0 - Arbitrary File Download Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/Mac-Photo-Gallery Demo: http://www.apptha.com/demo/mac-photo-gallery Version: 3...

WordPress Plugin Apptha Slider Gallery 1.0 - SQL Injection

Exploit Title: WordPress Plugin Apptha Slider Gallery v1.0 - SQL Injection Google Dork: N/A Date: 09.03.2017 Vendor Homepage: https://www.apptha.com/ Software: https://www.apptha.com/category/extension/Wordpress/apptha-slider-gallery Demo: http://www.apptha.com/demo/apptha-slider-gallery Version:...

Joomla! Component JO Facebook Gallery v4.5 - SQL Injection

Joomla! Component JO Facebook Gallery v4. 5 - SQL Injection index. php id parameter into the SQL statement exist GET the type of injection Injection point: http://localhost/PATH/index. php? option=comjofacebookgallery&view=category&id=SQL http://localhost/PATH/index. php?...

JO Facebook gallery,4.5,SQL Injection

JO Facebook gallery by Joomcore.com, 4.5,SQL Injection resolution: update to 4.6 Update Notice URL http://joomcore.com/news-updates/item/109-update-jo-facebook-gallery-to-version-4-6-fixed-problem-sql-injection-in-version-4-5...

WordPress plugin vulnerabilities affect over 100 million websites-vulnerability warning-the black bar safety net

As our Sucuri firewallWAF, vulnerability research part of the project, in order to find the existence of security issues, we have audited the plurality of open source projects. When audit WordPress“NextGEN”Gallery plugin, we found a seriousSQL injectionvulnerabilities. The vulnerability allows an...

Million-Plus WordPress Sites Exposed by Vulnerable Plugin

A popular WordPress gallery plugin with more than one million active installations was recently patched to address a vulnerability exposing website databases to attack. The NextGEN Gallery is a photo gallery management system used by professional photographers and artists upload, sort and group...

Tribulant Slideshow Gallery <= 1.6.4 - Authenticated Cross-Site Scripting (XSS)

The Slideshow Gallery WordPress plugin was affected by an Authenticated Cross-Site Scripting XSS security vulnerability...

WordPress plugin NextGEN Gallery SQL injection vulnerability

As part of a vulnerability research project for our Sucuri Firewall WAF, we have been auditing multiple open source projects looking for security issues. While working on the WordPress plugin NextGEN Gallery, we discovered a severe SQL Injection vulnerability. This vulnerability allows an...

WordPress Plugin NextGEN Gallery SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin NextGEN Gallery. It allows unauthenticated users to obtain...

NextGEN Gallery < 2.1.79 - Unauthenticated SQL Injection

According to the original source, one of the following conditions must be met for exploitation: 1. The use of a NextGEN Basic TagCloud gallery. 2. If users are able to submit posts to be reviewed contributors...

Joomla JO Facebook Gallery 4.5 SQL Injection

Exploit Title: Joomla! Component JO Facebook Gallery v4.5 - SQL Injection Google Dork: inurl:index.php?option=comjofacebookgallery Date: 24.02.2017 Vendor Homepage: http://joomcore.com/joomla32/ Software Buy:...