12069 matches found
WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload
WordPress Plugin Slideshow Gallery 1.4.6 - Arbitrary File Upload Summary: WordPress Slideshow Gallery plugin version 1.4.6 suffers from a remote shell upload vulnerability. Found by: Jesus Ramirez Pichardo @whitexploit http://whitexploit.blogspot.mx/ Date: 2014-08-28 Vendor Homepage:...
WordPress Slideshow Gallery Plugin 1.4.6 - Shell Upload
Slideshow Gallery plugin is prone to a sehll upload vulnerability. It allows an attacker to upload any PHP file remotely to the vulnerable website. Solution Upgrade the plugin...
WordPress Slideshow Gallery 1.4.6 Shell Upload
WordPress Slideshow Gallery 1.4.6 Shell Upload Vulnerability CVE-2014-5460 WordPress Slideshow Gallery plugin version 1.4.6 suffers from a remote shell upload vulnerability. Vendor Homepage: http://tribulant.com/ Software: Slideshow Gallery Version: 1.4.6 Software Link:...
WordPress Gmedia Gallery Shell Upload
Gmedia Gallery plugin is prone to Shell Upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process...
Wordpress SlideShow Gallery Authenticated File Upload
The Wordpress SlideShow Gallery plugin contains an authenticated file upload vulnerability. An attacker can upload arbitrary files to the upload folder. Since the plugin uses its own file upload mechanism instead of the WordPress API, it's possible to upload any file type. Module Options msf use...
XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress
Hello 3APA3A! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...
Wordpress Gallery Objects 0.4 SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress Gallery Objects 0.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://galleryobjects.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-objects.0.4.zip Dork Google:...
CVE-2014-5201
SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...
Sql injection
SQL injection vulnerability in the Gallery Objects plugin 0.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the viewid parameter in a goviewobject action to wp-admin/admin-ajax.php...
CVE-2014-5201
The CVE-2014-5201 entry involves the WordPress Gallery Objects plugin (version 0.4). The vulnerability is a SQL injection in the viewid parameter of the go_view_object action called via wp-admin/admin-ajax.php, allowing remote attackers to execute arbitrary SQL commands. The root cause is imprope...
Wordpress Gmedia Gallery 1.2.1 Shell Upload Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress Gmedia Gallery 1.2.1 Shell Upload Vulnerability Exploit Author : Claudio Viviani Vendor Homepage : http://www.codeasily.com/ Software Link : http://downloads.wordpress.org/plugin/grand-media.zip Date : 2014-08-01 Test...
WordPress Plugin GB Gallery Slideshow - '/wp-admin/admin-ajax.php' SQL Injection
source: https://www.securityfocus.com/bid/69181/info The GB Gallery Slideshow plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the...
WordPress GB Gallery Slideshow Plugin - SQL Injection
This WordPress GB Gallery Slideshow plugin's "wp-admin/admin-ajax.php" is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
Wordpress GB Gallery Slideshow 1.5 Authenticated SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title : Wordpress GB Gallery Slideshow 1.5 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://gb-plugins.com/ Software Link : http://downloads.wordpress.org/plugin/gb-gallery-slideshow.1.5.zip Date :...
WordPress GB Gallery Slideshow 1.5 SQL Injection
Exploit Title : Wordpress GB Gallery Slideshow 1.5 Authenticated SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://gb-plugins.com/ Software Link : http://downloads.wordpress.org/plugin/gb-gallery-slideshow.1.5.zip Date : 2014-08-09 Tested on : Linux / sqlmap 1.0-dev-5b2ded0...
WordPress Plugin GB Gallery Slideshow - wp-adminadmin-ajax.php SQL Injection
WordPress Plugin GB Gallery Slideshow - wp-adminadmin-ajax.php SQL Injection source: https://www.securityfocus.com/bid/69181/info The GB Gallery Slideshow plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it i...
CVE-2014-5186
SQL injection vulnerability in the All Video Gallery all-video-gallery plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogalleryvideos page to wp-admin/admin.php...
CVE-2012-6653
Unspecified vulnerability in the All Video Gallery all-video-gallery plugin before 1.2.0 for WordPress has unspecified impact and attack vectors...
Sql injection
SQL injection vulnerability in the All Video Gallery all-video-gallery plugin 1.2 for WordPress allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter in an edit action in the allvideogalleryvideos page to wp-admin/admin.php...