WordPress plugin NextGEN Gallery SQL injection vulnerability

As part of a vulnerability research project for our Sucuri Firewall WAF, we have been auditing multiple open source projects looking for security issues. While working on the WordPress plugin NextGEN Gallery, we discovered a severe SQL Injection vulnerability. This vulnerability allows an...

WordPress Plugin NextGEN Gallery SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin NextGEN Gallery. It allows unauthenticated users to obtain...

NextGEN Gallery < 2.1.79 - Unauthenticated SQL Injection

According to the original source, one of the following conditions must be met for exploitation: 1. The use of a NextGEN Basic TagCloud gallery. 2. If users are able to submit posts to be reviewed contributors...

Joomla JO Facebook Gallery 4.5 SQL Injection

Exploit Title: Joomla! Component JO Facebook Gallery v4.5 - SQL Injection Google Dork: inurl:index.php?option=comjofacebookgallery Date: 24.02.2017 Vendor Homepage: http://joomcore.com/joomla32/ Software Buy:...

Joomla! Component JO Facebook Gallery 4.5 - SQL Injection

Joomla! Component JO Facebook Gallery 4.5 - SQL Injection Exploit Title: Joomla! Component JO Facebook Gallery v4.5 - SQL Injection Google Dork: inurl:index.php?option=comjofacebookgallery Date: 24.02.2017 Vendor Homepage: http://joomcore.com/joomla32/ Software Buy:...

Joomla! Component JO Facebook Gallery 4.5 - SQL Injection

Exploit Title: Joomla! Component JO Facebook Gallery v4.5 - SQL Injection Google Dork: inurl:index.php?option=comjofacebookgallery Date: 24.02.2017 Vendor Homepage: http://joomcore.com/joomla32/ Software Buy:...

Joomla JO Facebook Gallery 4.5 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JO Facebook Gallery v4.5 - SQL Injection Google Dork: inurl:index.php?option=comjofacebookgallery Date: 24.02.2017 Vendor Homepage: http://joomcore.com/joomla32/ Software Buy:...

Joomla Groovy Gallery 1.0.0 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Groovy Gallery v1.0.0 - SQL Injection Google Dork: inurl:index.php?option=comgroovygallery Date: 17.02.2017 Vendor Homepage: http://addonstreet.com/ Software Buy:...

Joomla! Component Groovy Gallery 1.0.0 - SQL Injection

Exploit Title: Joomla! Component Groovy Gallery v1.0.0 - SQL Injection Google Dork: inurl:index.php?option=comgroovygallery Date: 17.02.2017 Vendor Homepage: http://addonstreet.com/ Software Buy: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/groovy-gallery/ Demo:...

Joomla! Component Groovy Gallery 1.0.0 - SQL Injection

Joomla! Component Groovy Gallery 1.0.0 - SQL Injection Exploit Title: Joomla! Component Groovy Gallery v1.0.0 - SQL Injection Google Dork: inurl:index.php?option=comgroovygallery Date: 17.02.2017 Vendor Homepage: http://addonstreet.com/ Software Buy:...

Joomla Groovy Gallery 1.0.0 SQL Injection

Exploit Title: Joomla! Component Groovy Gallery v1.0.0 - SQL Injection Google Dork: inurl:index.php?option=comgroovygallery Date: 17.02.2017 Vendor Homepage: http://addonstreet.com/ Software Buy: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/groovy-gallery/ Demo:...

Coppermine Gallery 1.5.44 Directory Traversal Vulnerability

Exploit for php platform in category web applications Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or...

Coppermine Gallery 1.5.44 - Directory Traversal

Coppermine Gallery 1.5.44 - Directory Traversal Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagic...

Coppermine Gallery < 1.5.44 - Directory Traversal

Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. A...

Coppermine Gallery 1.5.44 Directory Traversal

Coppermine Gallery = 1.5.44 directory traversal vulnerability ============================================================== Coppermine is a multi-purpose fully-featured and integrated web picture gallery script written in PHP using GD or ImageMagick as image library with a MySQL backend. A...

Joomla JE Gallery 1.3 SQL Injection

Exploit Title: Joomla! Component JE Gallery v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjegallery Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/je-gallery/ Demo:...

Joomla JE Gallery 1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component JE Gallery v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjegallery Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Gallery 1.3 - photo_id SQL Injection

Joomla! Component JE Gallery 1.3 - photoid SQL Injection Exploit Title: Joomla! Component JE Gallery v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjegallery Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy:...

Joomla! Component JE Gallery 1.3 - 'photo_id' SQL Injection

Exploit Title: Joomla! Component JE Gallery v1.3 - SQL Injection Google Dork: inurl:index.php?option=comjegallery Date: 13.02.2017 Vendor Homepage: http://www.joomlaextension.biz/ Software Buy: https://extensions.joomla.org/extensions/extension/photos-a-images/galleries/je-gallery/ Demo:...

CVE-2016-4987

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields...