CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000115

CVE-2016-1000115 affects Huge-IT Portfolio Gallery Manager for Joomla!, specifically version 1.1.0, with confirmed SQL Injection and XSS. The NVD entry lists a base score of 6.5 (MEDIUM) CVSS2 and 7.2 (HIGH) CVSS3, indicating potential client-side and server-side impact and network-exploitability...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

CVE-2016-1000116

CVE-2016-1000116 pertains to Huge-IT Portfolio Gallery manager. Connected sources identify a SQL Injection and XSS flaw affecting the product, with specific references to version 1.1.0 (Huge-IT Portfolio Gallery manager v1.1.0). Some entries also mention v1.1.5 as affected, indicating variants wi...

CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

PT-2016-4507 · Huge It · Huge-It Portfolio Gallery Manager

Name of the Vulnerable Software and Affected Versions: Huge-IT Portfolio Gallery manager version 1.1.0 Description: The issue concerns SQL Injection and XSS in the Huge-IT Portfolio Gallery manager. No information is provided about the estimated number of potentially affected devices or real-worl...

Wordpress wptf-image-gallery information disclosure vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. wptf-image-gallery is one of the gallery plugin for full-screen display. An information disclosure vulnerability exists in Wordpress wptf-image-gallery plugin v1.03, which can be exploited ...

WordPress InPost Gallery Plugin <= 2.1.2 - Local File Inclusion (LFI) Vulnerability

WordPress InPost Gallery plugin is prone to a local file inclusion vulnerability. The value of “popupshortcodekey”, in to the function renderhtml is not validated and later it is included. Solution Update the plugin...

WordPress InPost Gallery plugin <= 2.1.2 - Authenticated Persistent Cross-Site (XSS) Vulnerability

WordPress InPost Gallery plugin version = 2.1.2 is vulnerable to Cross-Site XSS vulnerability. The values on the admin settings page are not escaped. Solution Update the plugin...

InPost Gallery <= 2.1.2 - LFI & Authenticated Stored XSS

The InPost Gallery WordPress plugin was affected by a LFI & Authenticated Stored XSS security vulnerability...

Wordpress tidio-gallery plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on servers with PHP and MySQL. tidio-gallery is one of the photo gallery plugin. A cross-site scripting vulnerability exists in version 1.1 of the...

Huge-IT Portfolio Gallery plugin SQL injection vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS. Huge-IT Portfolio Gallery is one of the display of photos, videos and other extensions . A SQL injection vulnerability exists in version 1.0.6 of the Huge-IT Portfolio Gallery plugin for Jooml...

Joomla Huge-IT Video Gallery 1.0.9 ajax_url.php parameter galleryid SQL injection vulnerability

No description provided by source...

CVE-2016-1000153

Reflected XSS in wordpress plugin tidio-gallery v1.1...

CVE-2016-1000153

Reflected XSS in wordpress plugin tidio-gallery v1.1...

Cross site scripting

Reflected XSS in wordpress plugin tidio-gallery v1.1...

CVE-2016-1000153

The CVE-2016-1000153 entry concerns WordPress tidio-gallery plugin (v1.1 and earlier). A reflected XSS vulnerability exists in the plugin (notably in popup-insert-help.php) that could allow an attacker to execute arbitrary script in the victim’s browser, potentially stealing cookies or session da...