CVE-2016-6701

A remote code execution vulnerability in libskia in Android 7.0 before 2016-11-01 could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as High due to the possibility of remote code execution within the contex...

WordPress Huge IT Image Gallery Plugin <= 2.0.5 - Stored XSS

This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...

WordPress Huge IT Portfolio Gallery 2.0.77 Cross Site Scripting

------------------------------------------------------------------------ Cross-Site Scripting in Huge IT Portfolio Gallery WordPress Plugin ------------------------------------------------------------------------ Antonis Manaras, July 2016...

NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion (LFI) & SQLi

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Authenticated Local File Inclusion LFI & SQLi security vulnerability...

breckenridge-gallery.com XSS vulnerability

Vulnerable URL: http://www.breckenridge-gallery.com/searchresults.php?artistId=0=%27%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E==%27%22%3E%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E&submit2;=Search=1 Details: Description| Value ---|--- Patched:| Yes, at 24.11.2017 Latest check f...

Reflected XSS in Gallery application - ownCloud

The gallery app was not properly sanitizing exception messages from the ownCloud server. Due to an endpoint where an attacker could influence the error message this lead to a reflected Cross-Site-Scripting vulnerability. Affected Software ownCloud Server 9.1.2 CVE-2016-????...

Server: Reflected XSS in Gallery application

The gallery app was not properly sanitizing exception messages from the ownCloud server. Due to an endpoint where an attacker could influence the error message this lead to a reflected Cross-Site-Scripting vulnerability. For more information please consult the official advisory. This advisory is...

4images 1.7.13 SQL Injection

vulnerable app : 4images query$sql; Input parameter orderby is not sanitized before being passed to the sql query which lead to sql injection flaw POC GET /lab/4images1.7.13/4images/admin/validateimages.php?action=validateimages&orderby=extractvalue1,concat0x7e,version&direction=ASC&limitnumber=1...

Google Android Skia Memory Corruption Vulnerability

Google Skia is the United States Google Google company's an open source and C + + based graphics library , it can be used in Mozilla Firefox, Google Chrome and other browsers , but also available in the Android open mobile platform . A memory corruption vulnerability exists in Skia in Android 7.0...

SQL injection vulnerability in shopex ctl.gallery.php page

Shopex is an online store platform software system. A SQL injection vulnerability exists in the shopex ctl.gallery.php page, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

pro.iconosquare.com XSS vulnerability

Vulnerable URL: https://pro.iconosquare.com/widget/gallery?width=";%3E%3Csvg/onload=alert'OPENBUGBOUNTY'// Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated V...

Cross-site scripting vulnerability in wordpress plugin contest-gallery

Contest Gallery is a Wordpress plugin. The Wordpress plugin contest-gallery suffers from an xss vulnerability due to improper filtering of user input, which allows attackers to frame malicious web pages and trick users into parsing them to execute arbitrary code...

GIU Gallery File 1.0.2 SQL Injection Vulnerability

Exploit for php platform in category web applications GIU Gallery File 1.0.2 Upload SQL Injection Vulnerability ========================================================== Discovered by NA , NAattutanota.com ======================================== Description ============ Output and stored data...

GIU Gallery File 1.0.2 SQL Injection

GIU Gallery File 1.0.2 Upload SQL Injection Vulnerability ========================================================== Discovered by NA , NAattutanota.com ======================================== Description ============ Output and stored data will be path to image, title of link, link to image,...

Nextcloud Server Cross-Site Scripting Vulnerability (CNVD-2016-10262)

Nextcloud is a suite of open source self-hosted file synchronization and sharing communication application platform. Nextcloud Server has a cross-site scripting vulnerability in Gallery due to Gallery failing to adequately handle exception messages. An attacker can exploit this vulnerability to...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

CVE-2016-1000115 affects Huge-IT Portfolio Gallery Manager for Joomla!, specifically version 1.1.0, with confirmed SQL Injection and XSS. The NVD entry lists a base score of 6.5 (MEDIUM) CVSS2 and 7.2 (HIGH) CVSS3, indicating potential client-side and server-side impact and network-exploitability...