11902 matches found
Gallery Bank <= 3.0.101 - SQL Injection
The Gallery Bank – Responsive Photo Gallery plugin exposes a Short Code named ‘gallerybank’, in order to allow site publishers to insert galleries into pages / posts. This Short Code is vulnerable to a UNION based SQL Injection. This is possible by manipulating the field ‘showalbums’ when using...
WordPress Photo Gallery Plugin Arbitrary File Upload Vulnerability
WordPress Photo Gallery Plugin is a wordpress image plugin. The WordPress Photo Gallery Plugin suffers from an arbitrary file upload vulnerability, which allows attackers to exploit the vulnerability to submit a special file and execute it with WEB privileges, as the program fails to properly...
4images Cross Site Scripting / Clickjacking
Affected software: 4images Type of vulnerability: clickjacking,xss URL: http://www.4homepages.de/ Discovered by: Provensec Website: http://www.provensec.com Description: 4images is a powerful web-based image gallery management system. Features include comment system, user registration and...
Piwigo 2.7.3 - SQL Injection
Piwigo 2.7.3 - SQL Injection CVE-2015-1517 Piwigo - SQL Injection in Version 2.7.3 ---------------------------------------------------------------- Product Information: Software: Piwigo Tested Version: 2.7.3, released on 9 January 2015 Vulnerability Type: SQL Injection CWE-89 Download link:...
Piwigo 2.7.3 - SQL Injection
CVE-2015-1517 Piwigo - SQL Injection in Version 2.7.3 ---------------------------------------------------------------- Product Information: Software: Piwigo Tested Version: 2.7.3, released on 9 January 2015 Vulnerability Type: SQL Injection CWE-89 Download link: http://piwigo.org/basics/downloads...
Wordpress Photo Gallery Plugin Unrestricted File Upload (CVE-2014-9312)
An unauthorized file upload vulnerability has been reported in Wordpress Photo Gallery Plugin. A remote attacker could exploit this vulnerability by uploading a file to a server running the vulnerable application. Successful exploitation of this vulnerability could allow a remote attacker to...
Gallery WD version 1.2.3 and previous
Gallery WD version 1.2.3 and previous XSS Cross Site Scripting Resolution: Update to version 1.2.5 Update notice URL: http://web-dorado.com/products/joomla-gallery.html...
WordPress Plugin Video Gallery 2.7.0 - SQL Injection
WordPress Plugin Video Gallery 2.7.0 - SQL Injection Exploit Title : Wordpress Video Gallery 2.7 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...
Wordpress Video Gallery Plugin SQL Injection (CVE-2014-9097)
An SQL injection vulnerability has been reported in Wordpress Video Gallery Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Wordpress Video Gallery 2.7.0 SQL Injection Vulnerability
Photo Gallery Plugin for WordPress contains a flaw that allows a remote attacker to execute arbitrary PHP code. This flaw exists because the photo-gallery\photo-gallery.php script allows access to filemanager\UploadHandler.php. The post method in UploadHandler.php Exploit Title : Wordpress Video...
WordPress Video Gallery Plugin 2.7.0 - SQL Injection
This WordPress Video Gallery plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
WordPress Video Gallery 2.7 SQL Injection
Exploit Title : Wordpress Video Gallery 2.7 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.7.zip Dork Google:...
Photo Gallery <= 1.2.5 - Unrestricted File Upload
The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin was affected by an Unrestricted File Upload security vulnerability...
WordPress Photo Gallery 1.2.5 Unrestricted File Upload
This module requires Metasploit: http://www.metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'rex/zip' require 'json' class Metasploit3 'WordPress Photo Gallery 1.2.5 Unrestricted File Upload', 'Description' = %qPhoto Gallery Plugin...
WordPress Plugin Video Gallery 2.7.0 - SQL Injection
Exploit Title : Wordpress Video Gallery 2.7 SQL Injection Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link : https://downloads.wordpress.org/plugin/contus-video-gallery.2.7.zip Dork Google:...
Wordpress Video Gallery <= 2.7 - SQL Injection
The contus-video-gallery WordPress plugin was affected by a SQL Injection security vulnerability. http://example.com/wp-admin/admin-ajax.php?action=rss&type=video&vid=SQLi...
Wordpress Video Gallery <= 2.7 - SQL Injection
The contus-video-gallery WordPress plugin was affected by a SQL Injection security vulnerability. PoC http://example.com/wp-admin/admin-ajax.php?action=rss=video=SQLi...
Wordpress Theme Gallery pro Arbitrary File Upload Vulnerability
Exploit for php platform in category web applications Exploit Title: Wordpress Theme Gallery pro Arbitrary File Upload Vulnerability Source: https://github.com/UpThemes/Gallery-Pro-Theme Author: terrorist Email: email protected Team: GHC - Georgian Hacking Community Category: webapps/php Google...