CVE-2016-1000153

Reflected XSS in wordpress plugin tidio-gallery v1.1...

Reflected XSS in Gallery application (NC-SA-2016-009)

The gallery app was not properly sanitizing exception messages from the Nextcloud server. Due to an endpoint where an attacker could influence the error message this lead to a reflected Cross-Site-Scripting vulnerability...

CVE-2016-1000124

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...

CVE-2016-1000124

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...

CVE-2016-1000123

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

CVE-2016-1000123

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000113

XSS and SQLi in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000113

XSS and SQLi in huge IT gallery v1.1.5 for Joomla...

CVE-2015-1000007

Remote file download vulnerability in wptf-image-gallery v1.03...

Design/Logic Flaw

XSS in huge IT gallery v1.1.5 for Joomla...

Sql injection

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

Remote file inclusion

Remote file download vulnerability in wptf-image-gallery v1.03...

Sql injection

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...

CVE-2016-1000124

CVE-2016-1000124 affects Joomla! Huge-IT Portfolio Gallery Plugin 1.0.6 with an unauthenticated SQL injection in ajax_url.php. The vulnerability stems from unsafely handling POST data (e.g., page, perpage, galleryid) enabling SQL injection. Documented exploitation references exist (Exploit-DB, 0d...

CVE-2016-1000114

CVE-2016-1000114 corresponds to an XSS vulnerability in Joomla! Huge-IT Image Gallery extension v1.1.5. The CNVD entry notes two flaws in this version: a cross-site scripting issue and a SQL injection vulnerability arising from inadequate input filtering of user-submitted data. The description im...

CVE-2015-1000007

Remote file download vulnerability in wptf-image-gallery v1.03...

CVE-2016-1000123

CVE-2016-1000123 describes an unauthenticated SQL Injection in Huge-IT Video Gallery for Joomla (v1.0.9). The vulnerability arises in the Joomla component (and related com_videogallerylite Ajax URL handling) where user-controlled POST data (notably page and galleryid) is used to construct SQL que...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...