11882 matches found
CVE-2016-1000123
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...
CVE-2016-1000124
Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...
CVE-2015-1000007
CVE-2015-1000007 corresponds to a remote file download vulnerability in the WordPress plugin “wptf-image-gallery” v1.03. The issue arises in the plugin’s file handling in lib-mbox/ajax_load.php, where user input is not properly sanitized and access control is not enforced, enabling an unauthentic...
CVE-2016-1000113
CVE-2016-1000113 affects Joomla! Huge-IT Image Gallery extension (v1.1.5). Reported XSS and SQL injection flaws stem from insufficient input validation in the gallery plugin (notably id parameter handling in admin/gallery.php). Impact per the records includes potential disclosure or modification ...
PT-2016-4515 · Huge It · Huge-It Video Gallery
Name of the Vulnerable Software and Affected Versions: Huge-IT Video Gallery version 1.0.9 Description: The issue is related to an unauthenticated SQL Injection. Recommendations: For version 1.0.9, update to a newer version that contains a fix for this issue, if available. At the moment, there is...
Portfolio <= 2.1.10 - Reflected Cross-Site Scripting (XSS)
The portfolio-gallery WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...
Joomla Huge-IT Portfolio Gallery 1.0.6 SQL Injection
Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description: Huge-IT...
Nextcloud 'share.js' Gallery Application XSS Vulnerability - Linux
Nextcloud is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Huge-IT Video Gallery Extension SQL Injection Vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . Huge-IT Image Gallery is one of the image gallery extension plug-ins . A SQL injection vulnerability exists in version 1.0.9 ...
Huge IT Video Gallery,1.1.1,XSS (Cross Site Scripting)
Huge IT Video Gallery,1.1.1,XSS Cross Site Scripting Also versions 1.0.9 and previous have SQL injection vulnerability Resolution: update to version 1.1.3 Update notice: https://huge-it.com/joomla-extensions-security-notice/...
Wordpress Robo Gallery Code Execution Vulnerability
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code execution vulnerability exists in Wordpress Robo Gallery. Due to the 'rbsgalleryajax.php' file GET...
Joomla Huge-IT Video Gallery 1.0.9 SQL Injection
Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified: 2016-09-17 Vendor Contact: [email protected]...
Joomla! Component com_videogallerylite 1.0.9 - SQL Injection
Joomla! Component comvideogallerylite 1.0.9 - SQL Injection Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor...
Joomla! Component com_videogallerylite 1.0.9 - SQL Injection
Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified: 2016-09-17 Vendor Contact: [email protected]...
Joomla Huge-IT Video Gallery 1.0.9 Component - SQL Injection Vulnerability
Exploit for php platform in category web applications Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified...
Cross-site scripting vulnerability in wordpress plugin sns-image-gallery
WordPress is a blogging platform developed using the PHP language by the WordPress Software Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin sns-image-gallery due to a failure to...
OwnCloud Server and Nextcloud Server Cross-Site Scripting Vulnerabilities
OwnCloud is a free and open source personal cloud storage solution from OwnCloud Germany.Nextcloud is an open source self-hosted file synchronization and sharing communication application platform.OwnCloud Server and Nextcloud Server are both a server version of one of them. A cross-site scriptin...
CVE-2016-7419
Affected software and scope: CVE-2016-7419 is an XSS vulnerability in the share.js file of the gallery application used by ownCloud Server < 9.0.4 and Nextcloud Server
CVE-2016-7419
Cross-site scripting XSS vulnerability in share.js in the gallery application in ownCloud Server before 9.0.4 and Nextcloud Server before 9.0.52 allows remote authenticated users to inject arbitrary web script or HTML via a crafted directory name...
Joomla! Component Portfolio Gallery 1.0.6 - SQL Injection
Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Joomla extension v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description:...