Simple Photo Gallery 1.7.8 - Blind SQL Injection

MySQL = 5.0.12 AND time-based blind SELECT sql injection in the galleryid parameter. PoC ./sqlmap.py --dbms=MYSQL --technique T -u http://www.example.com/wordpress/index.php/wppgphotogallery/wppgphotodetails/?galleryid=1ℑid=14...

Simple Photo Gallery 1.7.8 - Blind SQL Injection

MySQL = 5.0.12 AND time-based blind SELECT sql injection in the galleryid parameter. ./sqlmap.py --dbms=MYSQL --technique T -u http://www.example.com/wordpress/index.php/wppgphotogallery/wppgphotodetails/?galleryid=1&imageid=14...

CRUCMS Crucial Networking - SQL Injection Vulnerability

Document Title: =============== CRUCMS Crucial Networking - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1497 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 14...

CRUCMS Crucial Networking - SQL Injection Vulnerability

Document Title: =============== CRUCMS Crucial Networking - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1497 Release Date: ============= 2015-05-17 Vulnerability Laboratory ID VL-ID: ==================================== 14...

WordPress BP Gallery Plugin <= 1.2.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...

WordPress GRAND Flash Album Gallery Plugin <= 2.16 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and SQL injection vulnerabiliites. Solution Update the plugin...

WordPress NextGen Smooth Gallery Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress WP Easy Gallery Plugin <= 2.7 - Multiple Cross Site Request Forgery

This plugin is prone to multiple admin function cross site request forgery vulnerability. Solution Update plugin...

WordPress GRAND Flash Album Gallery Plugin <= 1.56 - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 2.0.63 - Arbitrary File Upload

This plugin is prone to arbitrary file upload vulnerability. Solution Upgrade the plugin...

WordPress NextGEN Gallery Plugin <= 1.9.11 - Full Path Disclosure

Because of this vulnerability, attackers can disclose certain system information. Solution Update the plugin...

WordPress Sintic Gallery Plugin - Full Path Disclosure

This plugin is prone to a full path disclosure vulnerability. Solution Update plugin...

WordPress ReFlex Gallery Plugin <= 1.4.2 - Unspecified XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update plugin...

WordPress NextGen Cu3er Gallery Plugin - Information Disclosure

This plugin is prone to an Iinformation disclosure vulnerability. Solution Update plugin...

WordPress BP Gallery Plugin <= 1.2.5 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade the plugin...

WordPress o2s gallery Plugin - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress ReFlex Gallery Plugin <= 1.3 - Shell Upload

This plugin is prone to a shell upload vulnerability. Solution Update plugin...

WordPress DZS Video Gallery Plugin - Reflected XSS

This plugin is prone to a cross site scripting vulnerability in ajax.php source parameter. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.9.0 - Multiple XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.9.5 - Stored XSS

This plugin is prone to a cross site scripting vulnerability via gallerypath parameter. Solution Update the plugin...