WordPress Video Gallery 2.7 SQL Injection

Exploit Title: WordPress Video Gallery 2.7 SQL Injection Date: 20-01-2015 Software Link: https://wordpress.org/plugins/contus-video-gallery/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $GET'vid' is not...

WordPress Plugin Video Gallery 2.7 - SQL Injection

Exploit Title: WordPress Video Gallery 2.7 SQL Injection Date: 20-01-2015 Software Link: https://wordpress.org/plugins/contus-video-gallery/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ Category: webapps 1. Description $GET'vid' is not...

WordPress Video Gallery 2.7 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress Video Gallery 2.7 SQL Injection Date: 20-01-2015 Software Link: https://wordpress.org/plugins/contus-video-gallery/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website:...

WordPress Plugin Video Gallery 2.7 - SQL Injection

WordPress Plugin Video Gallery 2.7 - SQL Injection Exploit Title: WordPress Video Gallery 2.7 SQL Injection Date: 20-01-2015 Software Link: https://wordpress.org/plugins/contus-video-gallery/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl...

WordPress WPTF Image Gallery 1.03 File Download

Title: Remote file download vulnerability in wptf-image-gallery v1.03 Author: Larry W. Cashdollar, @larry0 Date: 2015-07-17 Download Site: https://wordpress.org/plugins/wptf-image-gallery Vendor: https://profiles.wordpress.org/sakush100/ Vendor Notified: 0000-00-00 Vendor Contact:...

WordPress Unite Gallery Lite Plugin SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Unite Gallery is a graphics and video gallery plugin for WordPress. Unite Gallery Lite 1.4.6 and other versions suffer from ...

WordPress Unite Gallery Lite Plugin Cross-Site Request Forgery Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.Unite Gallery is a graphics and video gallery plugin for WordPress. Unite Gallery Lite 1.4.6 and other versions suffer from ...

WordPress Flickr Justified Gallery Plugin <= 3.3.6 - Reflected Cross Site Scripting

Because of this vulnerability, unauthenticated attackers can do anything that admin can do. Solution Update the plugin...

WordPress Flickr Justified Gallery 3.3.6 Cross Site Scripting

Details ================ Software: Flickr Justified Gallery Version: 3.3.6 Homepage: https://wordpress.org/plugins/flickr-justified-gallery/ Advisory report:...

Flickr Justified Gallery <= 3.3.6 - Reflected Cross-Site Scripting (XSS)

The Flickr Justified Gallery WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...

WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities

Unite Gallery Lite is prone to multiple vulnerabilities, such as CSRF and SQL injection. Solution Update the plugin...

WordPress Plugin Unite Gallery Lite 1.4.6 - Multiple Vulnerabilities

Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lite Wordpress Plugin Product URL: https://wordpress.org/plugins/unite-gallery-lite/ Vulnerability Type: Cross-site Request Forgery...

WordPress Powerplay Gallery Plugin <= 3.3 - Unrestricted File Upload

This vulnerability allows an attacker to execute arbitrary code by uploading a file with an executable extension. After that an attacker access it via a direct request to the file in uploadfolder/big/. Solution Update the plugin...

WordPress Plugin Unite Gallery Lite 1.4.6 - Multiple Vulnerabilities

WordPress Plugin Unite Gallery Lite 1.4.6 - Multiple Vulnerabilities Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lite Wordpress Plugin Product URL:...

WordPress Unite Gallery Lite Plugin 1.4.6 - Multiple Vulnerabilities

WordPress Unite Gallery Lite plugin version 1.4.6 suffers from cross site request forgery and remote SQL injection vulnerabilities. Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lit...

WordPress Unite Gallery Lite 1.4.6 CSRF / SQL Injection

Title: Cross-Site Request Forgery & SQL Injection Vulnerabilities in Unite Gallery Lite Wordpress Plugin v1.4.6 Submitter: Nitin Venkatesh Product: Unite Gallery Lite Wordpress Plugin Product URL: https://wordpress.org/plugins/unite-gallery-lite/ Vulnerability Type: Cross-site Request Forgery...

Unite Gallery Lite <= 1.4.6 - CSRF & Authenticated SQL Injection

The Unite Gallery Lite WordPress plugin was affected by a CSRF & Authenticated SQL Injection security vulnerability...

WordPress Powerplay Gallery Plugin <= 3.3 - Multiple SQL Injection

This vulnerability is in upload.php. It allows an attacker to execute arbitrary SQL commands via the "albumid" or "name" parameter. Solution Update the plugin...

Zaption: Cheating at gallery rating

Hello! Example: http://www.zaption.com/listing/55aba5719c77e5386eb28df0 We can rate tour any mark by POST http://www.zaption.com/ajax/gallery/listing/tourid/rate/mark For example: POST http://www.zaption.com/ajax/gallery/listing/55aba5719c77e5386eb28df0/rate/100000000000000000 So, we have "curve"...

Zaption: XSS - Gallery Search Listing

HI. If you upload video having title with XSS payload. and search for the video, the dropdown listing will execute the payload. https://www.zaption.com/gallery/search?q=%3E%3Cimg I need not to upload the payload, I utilized already uploaded videos. You can also execute the payload by just start...