WordPress Huge-IT Image Gallery Plugin 1.8.9 - Multiple Vulnerabilities

Multiple vulnerabilities were found in Huge-IT Image Gallery 1.8.9 plugin. 1 It's prone to a SQL injection vulnerability 2 Also, there's a Full Path Disclosure vulnerability. Solution Update Huge-IT Image Gallery plugin to 1.9.0 version...

WordPress Huge-IT Image Gallery 1.8.9 Plugin - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress plugin Image Gallery Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/gallery-images/" Date: 12-05-2016 Software Link: https://fr.wordpress.org/plugins/gallery-images/ Version: 1.8.9 and...

WordPress Huge IT Image Gallery Plugin 1.8.9 - Multiple Vulnerabilities

Huge IT Image Gallery plugin is prone to full path disclosure and SQL injection vulnerabilities. Solution Upgrade the plugin...

WordPress Plugin Huge-IT Image Gallery 1.8.9 - Multiple Vulnerabilities

Exploit Title: WordPress plugin Image Gallery Full Path Disclosure and SQL Injection Google Dork: inurl:"wp-content/plugins/gallery-images/" Date: 12-05-2016 Software Link: https://fr.wordpress.org/plugins/gallery-images/ Version: 1.8.9 and prior Exploit Author: Gwendal Le Coguic Website:...

WordPress Robo Gallery 2.0.14 Code Execution

No description provided by source...

WordPress Simple Photo Gallery Plugin <= 1.8.0 - Stored Cross Site Scripting

Because of this vulnerability, attackers can execute malicious cides on name input of the gallery and album. Solution Update the plugin...

WordPress Simple Photo Gallery Plugin <= 1.8.0 - Stored Cross Site Scripting

Because of this vulnerability, attackers can execute malicious cides on name input of the gallery and album. Solution Update the plugin...

HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The hdw-tube WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/hdw-tube/playlist.php?playlist="alert1;alert1;"...

Robo Gallery <= 2.0.14 - Remote Code Execution

This is potentially a False Positive. Needs further investigation...

WordPress Robo Gallery Plugin <= 2.0.14 - Remote Code Execution

This plugin is prone to a remote code execution vulnerability. It allows the attackers to execute own malicious php commands to compromise the web-application or connected dbms. Solution Update the plugin...

WordPress HDW Video Gallery Plugin <= 1.2 - Cross-Site Scripting (XSS)

Because of this vulnerability, the variable playlist appears to send unsanitized data back to the users browser. Solution Update the plugin...

WordPress Robo Gallery 2.0.14 Code Execution

Document Title: =============== Wordpress Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-12 Vulnerability Laboratory ID VL-ID:...

Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The tidio-gallery WordPress plugin was affected by a Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/tidio-gallery/popup-insert-help.php?galleryId=""...

HDW WordPress Video Gallery <= 1.2 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The hdw-tube WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/wp-content/plugins/hdw-tube/playlist.php?playlist=""...

Tidio Gallery <= 1.1 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The tidio-gallery WordPress plugin was affected by a Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. http://www.example.com/wp-content/plugins/tidio-gallery/popup-insert-help.php?galleryId="alert1;"...

WordPress Tidio Gallery Plugin <= 1.1 - Cross Site Scripting (XSS)

This vulnerability is in the php code /tidio-gallery/popup-insert-help.php. Solution Update the plugin...

WP Robo Gallery v2.0.14 - Code Execution Vulnerability

Document Title: =============== WP Robo Gallery v2.0.14 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1822 Release Date: ============= 2016-04-11 Vulnerability Laboratory ID VL-ID: ==================================== 182...

Kids Art Gallery - Exported ContentProvider, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Kids Art Gallery published at the 'play' market has multiple vulnerabilities...

The Sims™ 4 Gallery - Customized SSL, Exported ContentProvider, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application The Sims™ 4 Gallery published at the 'play' market has multiple vulnerabilities...

FOTO Gallery - Dangerous filesystem permissions, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application FOTO Gallery published at the 'play' market has multiple vulnerabilities...