11894 matches found
WordPress Explorer Gallery Plugin - Arbitrary File Upload
This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...
WordPress Explorer Gallery Plugin - Arbitrary File Upload
This plugin is prone to an arbitrary file upload vulnerability. Solution Update the plugin...
WordPress Sintic Gallery Plugin - Arbitrary File Upload
This plugin is prone to an arbitrary file upload vulnerability. Solution Update plugin...
WordPress NextGEN Gallery Plugin <= 2.1.7 - Authenticated Path Traversal
Because of this vulnerability, attackers can access system files and other unauthorized files on the server. Solution Update the plugin...
osfa.info XSS vulnerability
Vulnerable URL: http://www.osfa.info/?galleryID=103193=thumb'%22%26%25prompt/XSSPOSED/...
WordPress Cool Video Gallery Plugin <= 1.9 - Command Injection
This vulnerability in lib/core.php allows an attacker to execute arbitrary code via shell metacharacters in the "Width of preview image". Solution Update the plugin...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio plugin 1.3.47 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the 1 Media Title or 2 Media Subtitle fields...
CVE-2015-7386
Multiple cross-site scripting XSS vulnerabilities in includes/metaboxes.php in the Gallery - Photo Albums - Portfolio plugin 1.3.47 for WordPress allow remote authenticated users to inject arbitrary web script or HTML via the 1 Media Title or 2 Media Subtitle fields...
WordPress Video Gallery 2.7 SQL Injection
No description provided by source...
WordPress NextGEN Gallery plugin 'dir' parameter directory traversal vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.NextGEN Gallery is a WordPress gallery plugin. A directory traversal vulnerability exists in the NextGEN Gallery...
WordPress Easy Media Gallery 1.3.47 Cross Site Scripting
Exploit : For Exploiting This Vulnerability Install Easy Media Gallery Plugin Then Create New Media In Media Title Input : "/alert'Exploit' Then In Media Subtitle Like Media Title Input : "/alert'Exploit1' After Creating New JavaScript Code Will Be Executed . Video Poc : http://youtu.be/5nMQUgP6n...
WordPress Easy Media Gallery Plugin <= 1.3.47 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...
Easy Media Gallery <= 1.3.47 - Cross Site Scripting (XSS)
The Gallery – Photo Albums Plugin WordPress plugin was affected by a Cross Site Scripting XSS security vulnerability...
WordPress Easy Media Gallery Plugin <= 1.3.47 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability. Solution Update the plugin...
WordPress NextGEN Gallery Directory Read Vulnerability
This module exploits an authenticated directory traversal vulnerability in WordPress Plugin "NextGEN Gallery" version 2.1.7, allowing to read arbitrary directories with the web server privileges. This module requires Metasploit: https://metasploit.com/download Current source:...
NextGEN Gallery < 2.1.9 - Authenticated Path Traversal
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Authenticated Path Traversal security vulnerability...
NextGen Gallery < 2.1.15 - Path Traversal
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Path Traversal security vulnerability...
PHP Kobo Photo Gallery CMS for PC/smartphone and feature phone Cross Site Scripting Vulnerability
PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone is a photo gallery content management system CMS for PC, smartphone and feature phone from PHP Kobo Japan. A cross-site scripting vulnerability exists in the jquery.lightbox-0.5.min.js file in PHP Kobo Photo Gallery CMS for PC,...
PHP Kobo Photo Gallery CMS for PC/smartphone and feature phone Cross-Site Request Forgery Vulnerability
PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone is a photo gallery content management system CMS for PC, smartphone and feature phone from PHP Kobo Japan. A cross-site request forgery vulnerability exists in the admin.php script in PHP Kobo Photo Gallery CMS for PC, smartphone and...