11902 matches found
WoltLab Community Gallery - Persistent Cross-Site Scripting
Vulnerability title: Community Gallery - Stored Cross-Site Scripting vulnerability Product: Community Gallery Vendor: https://www.woltlab.com Affected version: Community Gallery 2.0 before 12/10/2014 Download link: https://www.woltlab.com/purchase/?products=com.woltlab.gallery Fixed version:...
CVE-2015-2275
Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...
Cross site scripting
Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...
CVE-2015-2275
Cross-site scripting XSS vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parametersdata7title parameter in a saveImageData action to index.php/AJAXProxy...
CVE-2015-2275
WoltLab Community Gallery 2.0 (pre-12/26/2014) is affected by a stored XSS via parameters[data][7][title] in the saveImageData action to index.php/AJAXProxy. The vulnerability enables arbitrary script/HTML injection and is documented with a PoC and public references. Fixed in Community Gallery 2....
Community Gallery 2.0 Cross Site Scripting
Vulnerability title: Community Gallery - Srored Corss-Site Scripting vulnerability Product: Community Gallery Vendor: https://www.woltlab.com Affected version: Community Gallery 2.0 before 12/10/2014 Download link: https://www.woltlab.com/purchase/?products=com.woltlab.gallery Fixed version:...
Wordpress Reflex Gallery Plugin Arbitrary File Upload
An unauthorized file upload vulnerability has been reported in Wordpress Reflex Gallery Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...
Joomla! Component com_simplephotogallery 1.0 - Arbitrary File Upload
Exploit Title: Joomla Simple Photo Gallery - Arbitrary File Upload Google Dork: inurl:comsimplephotogallery Date: 10.03.2015 Exploit Author: CrashBandicot @DosPerl My Github: github.com/CCrashBandicot Vendor Homepage: https://www.apptha.com/ Software Link:...
WordPress Plugin Reflex Gallery 3.1.3 - Arbitrary File Upload
WordPress Plugin Reflex Gallery 3.1.3 - Arbitrary File Upload Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork: inurl:wp-content/plugins/reflex-gallery/ Date: 08.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage:...
WordPress Plugin Reflex Gallery 3.1.3 - Arbitrary File Upload
Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork: inurl:wp-content/plugins/reflex-gallery/ Date: 08.03.2015 Exploit Author: CrashBandicot @DosPerl Vendor Homepage: https://wordpress.org/plugins/reflex-gallery/ Software Link:...
WordPress Reflex Gallery Plugin 3.1.3 - Arbitrary File Upload
WordPress Reflex Gallery plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...
Wordpress Plugin Reflex Gallery - Arbitrary File Upload Vulnerability
Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork: inurl:wp-content/plugins/reflex-gallery/ Vendor Homepage: https://wordpress.org/plugins/reflex-gallery/ Version: 3.1.3 Last Exploit Title: Wordpress Plugin Reflex Gallery - Arbitrary File Upload Google Dork:...
WordPress Plugin Apptha WordPress Video Gallery SQL Injection Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site .Apptha WordPress Video Gallery contus-video-gallery is one of the video gallery plugin. A SQL injection...
WordPress Video_Gallery Plugin 2.7.0 /videogalleryrss.php SQL注入漏洞
No description provided by source...
CVE-2015-2065
SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...
Sql injection
SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...
CVE-2015-2065
CVE-2015-2065 is a SQL injection vulnerability in the Apptha WordPress Video Gallery (contus-video-gallery) plugin for WordPress, affecting versions before 2.8. The flaw allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php. The...
CVE-2015-2065
SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery contus-video-gallery plugin before 2.8 for WordPress allows remote attackers to execute arbitrary SQL commands via the vid parameter in a rss action to wp-admin/admin-ajax.php...
WordPress Apptha Video Gallery Plugin <= 2.7 - SQL Injection
Because of this vulnerability, the attackers can execute arbitrary SQL commands via the "vid" parameter in a rss action to wp-admin/admin-ajax.php. Solution Update the plugin...
WordPress Contus Video Gallery Unauthenticated SQL Injection Scanner
This module attempts to exploit a UNION-based SQL injection in Contus Video Gallery for Wordpress version 2.7 and likely prior in order if the instance is vulnerable. Module Options msf use auxiliary/scanner/http/wp/contusvideogallerysqli msf undefinedcontusvideogallerysqli show actions...