Gallery 2 < 2.0.2 - Multiple Vulnerabilities

Gallery 2 Multiple Vulnerabilities Vendor: Bharat Mediratta Product: Gallery 2 Version: = 2.0.2 Website: http://gallery.menalto.com/ BID: 16940 CVE: CVE-2006-1127 CVE-2006-1128 OSVDB: 23596 23597 SECUNIA: 19104 PACKETSTORM: 44358 Description: Gallery2, the open source web based photo album...

Joomla Simple Photo Gallery v1.0 参数albumid SQL注入漏洞

No description provided by source...

irishsurnames.com XSS vulnerability

Vulnerable URL: http://www.irishsurnames.com/cgi-bin/gallery.pl?name=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 711376 Google...

WordPress Huge It Image Gallery Plugin <= 1.7.0 - Reflected Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...

WordPress WP Easy Gallery Plugin HTML Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Easy Gallery is one of the image gallery plugin. An HTML injection vulnerability exists in the WordPress WP Eas...

stwing.upenn.edu XSS vulnerability

Vulnerable URL: https://www.stwing.upenn.edu/cnadams/Flash%20Gallery/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

WordPress WP Easy Gallery Plugin <= 2.7 - Cross Site Request Forgery

This plugin is prone to a cross site request forgery vulnerability. Solution Upgrade this plugin...

WordPress Easy Gallery 4.1.4 Cross Site Scripting

Product : WP Easy Gallery Exploit Author : Rahul Pratap Singh Version : 4.1.4 Home page Link : https://wordpress.org/plugins/wp-easy-gallery Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 26/Jan/2016 XSS Vulnerability:...

WordPress WP Easy Gallery Plugin <= 1.7 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

WP Easy Gallery <= 4.1.4 - Reflected Cross-Site Scripting (XSS)

The WP Easy Gallery – WordPress Gallery Plugin WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress WP Easy Gallery Plugin <= 4.1.4 - Reflected XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

Joomla 组件Gallery WD SQL注入漏洞

0x01 漏洞简介 Joomla 组件Gallery WD存在多处SQL注入漏洞。远程攻击者可以利用该漏洞执行任意SQL指令。该插件的下载地址是： http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-wd 0x02漏洞说明 2.1参数themeid存在GET型SQL注入漏洞 该漏洞利用的POC格式如下： index.php?option=comgallerywd&view=gallerybox&imageid=19&galleryid=2&themeid=1 AND...

Dream Gallery 1.0 SQL Injection

Sql Injection on Dream Gallery v1.0 + Date: 10/01/2016 + Risk: High + CWE Number : CWE-89 + Author: Felipe Andrian Peixoto + Vendor Homepage: http://clareslab.com.br/ + Software Demo : http://clareslab.com.br/dream/ + Contact: [email protected] + Tested on: Windows 7 and Gnu/Linux + Dork:...

jonesartgallery.com XSS vulnerability

Vulnerable URL: http://jonesartgallery.com/ordering.html?ImageName=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:13 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

NextGEN Gallery < 2.1.15 - Unrestricted File Upload

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability...

Wordpress Cool Video Gallery插件命令注入漏洞

No description provided by source...

WordPress Gallery Master 1.0.22 Cross Site Scripting

Exploit : For Exploiting This Vulnerability Install Testimonial Slider Plugin Then Create New SGallery In Gallery Title Input And Gallery Description Place Your JavaScript Code After Creating Gallery JavaScript Code Will Be Executed . Plugin Is Accessable By Authors , Administartors , Editors...

Input validation

lib/core.php in the Cool Video Gallery plugin 1.9 for WordPress allows remote attackers to execute arbitrary code via shell metacharacters in the "Width of preview image" and possibly other input fields in the "Video Gallery Settings" page...

CVE-2015-7527

CVE-2015-7527 affects the WordPress plugin Cool Video Gallery (version 1.9 and earlier). The issue is a remote command-injection vulnerability in lib/core.php, where user-supplied input (notably the "Width of preview image" on the Video Gallery Settings page) can be used to inject shell commands ...

Wordpress Cool Video Gallery plugin command injection vulnerability

WordPress is the WordPress Software Foundation's set of blogging platforms developed using the PHP language.Cool Video Gallery is one of the video gallery plugin. A command injection vulnerability exists in Wordpress Cool Video Gallery plugin version 1.9 and earlier. An attacker can use this...