CVE-2016-4987

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields...

Directory traversal

Directory traversal vulnerability in the Image Gallery plugin before 1.4 in Jenkins allows remote attackers to list arbitrary directories and read arbitrary files via unspecified form fields...

CVE-2016-4987

The CVE concerns the Jenkins Image Gallery Plugin where versions prior to 1.4 are vulnerable to a directory traversal flaw. An attacker could remotely list arbitrary directories and read arbitrary files via unspecified form fields in the plugin. This is documented across multiple sources (GHSA, O...

Web Inspiration Gallery Script 1.0.0 SQL Injection

Exploit Title: Flippy Inspired a Web Inspiration Gallery Script v1.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy: https://www.flippyscripts.com/flippy-inspired-web-inspiration-gallery-script/ Demo: http://inspired.flippydemos.co...

Web Inspiration Gallery Script 1.0.0 - id Parameter SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Flippy Inspired – Web Inspiration Gallery Script v1.0.0 - SQL Injection Google Dork: N/A Date: 06.02.2017 Vendor Homepage: https://www.flippyscripts.com/ Software Buy:...

Huge IT gallery,1.1.5,SQL Injection

Huge IT gallery,1.1.5,SQL Injection resolution: update to 1.1.9...

Easy Youtube Gallery , 1.0.2,Information Disclosure

Easy Youtube Gallery , 1.0.2,Information Disclosure...

My Photo Gallery 1.0 - SQL Injection

Introduction Exploit Title: My Photo Gallery – SQL Injection Date: 27.01.2017 Vendor Homepage: http://software.friendsinwar.com/ Software Link: http://software.friendsinwar.com/news.php?readmore=40 Exploit Author: Kaan KAMIS Contact: iletisimatk2andotcom Website: http://k2an.com Category: Web...

My Photo Gallery 1.0 - SQL Injection Vulnerability

Exploit for php platform in category web applications Introduction Exploit Title: My Photo Gallery – SQL Injection Date: 27.01.2017 Vendor Homepage: http://software.friendsinwar.com/ Software Link: http://software.friendsinwar.com/news.php?readmore=40 Exploit Author: Kaan KAMIS Contact:...

CVE-2016-5876

ownCloud server before 8.2.6 and 9.x before 9.0.3, when the gallery app is enabled, allows remote attackers to download arbitrary images via a direct request...

Cloud Gallery - Corrupted files, Dynamic Code Loading, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Cloud Gallery published at the 'play' market has multiple vulnerabilities...

Cloud Photo Gallery - Customized SSL, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application Cloud Photo Gallery published at the 'play' market has multiple vulnerabilities...

daisydalesschool.info XSS vulnerability

Vulnerable URL: http://www.daisydalesschool.info/gallery.php?id=70%27"--!' Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16113684 VIP website status:| No Check daisydalesschool.in...

granarygallery.com XSS vulnerability

Vulnerable URL: http://granarygallery.com/search-works.php?keyword=%22%3E%3Csvg%2Fonload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6278510 VIP...

mobilegallery.slh.com XSS vulnerability

Vulnerable URL: http://mobilegallery.slh.com/exc/aspquery?command=invoke=13552=141388%22%3E%3Csvg/onload=prompt/OPENBUGBOUNTY/%3E〈=en Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

stwing.upenn.edu XSS vulnerability

Open Bug Bounty ID: OBB-203985 Description| Value ---|--- Affected Website:| stwing.upenn.edu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Cross-site scripting vulnerability in wordpress plugin really-simple-gallery

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin really-simple-gallery suffers from a cross-site scripting vulnerability due to improper filtering of use...

WordPress plugin wp-gallery-mail suffers from a reflected cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A reflective cross-site scripting vulnerability exists in the WordPress plugin wp-gallery-mail 'login.php' page, which can be exploited by attackers to construct...

Cross-site scripting vulnerability in wordpress plugin ultimate-gallery

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. The wordpress plugin ultimate-gallery has a cross-site scripting vulnerability due to improper filtering of user input. As th...

WordPress ZM Gallery Plugin <= 1.0 - Blind SQL Injection

This plugin is prone to an SQL injection vulnerability. It allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...