NextCellent Gallery < 1.9.18 - Multiple Stored XSS

The NextCellent Gallery – NextGEN Legacy WordPress plugin was affected by a Multiple Stored XSS security vulnerability...

WordPress Lazyest Gallery Plugin <= 0.10.4.3 - Content Manipulation

This plugin is prone to multiple file/directory insecure permissions local content manipulation. Solution Update the plugin...

Tinymce Thumbnail Gallery <= 1.0.7 - download-image.php Local File Inclusion

The Tinymce Thumbnail Gallery WordPress plugin was affected by a download-image.php Local File Inclusion security vulnerability. As seen in access logs: http://www.example.com/wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php?href=../../../../wp-config.php...

WordPress Easy Media Gallery Plugin <= 1.2.25 - CSRF

This plugin is prone to a cross site request forgery vulnerability in includes/emg-settings.php spgaddadmin function. Solution Update the plugin...

DZS Video Gallery - ajax.php source Parameter Reflected XSS

The dzs-videogallery WordPress plugin was affected by an ajax.php source Parameter Reflected XSS security vulnerability...

Tinymce Thumbnail Gallery <= 1.0.7 - download-image.php Local File Inclusion

The Tinymce Thumbnail Gallery WordPress plugin was affected by a download-image.php Local File Inclusion security vulnerability. PoC As seen in access logs: http://www.example.com/wp-content/plugins/tinymce-thumbnail-gallery/php/download-image.php?href=../../../../wp-config.php...

DZS Video Gallery - upload.php File Upload Remote Code Execution

The dzs-videogallery WordPress plugin was affected by an upload.php File Upload Remote Code Execution security vulnerability...

ReFlex Gallery 1.4.2 - Unspecified XSS

The ReFlex Gallery » WordPress Photo Gallery WordPress plugin was affected by an Unspecified XSS security vulnerability...

Wordpress Video Gallery Plugin 2.5 - Multiple Vulnerabilities

No description provided by source. Wordpress Video Gallery Exploit Title : Wordpress Video Gallery 2.5 SQL Injection and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

Wordpress Video Gallery Plugin 2.5 - Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title : Wordpress Video Gallery 2.5 SQL Injection and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

Joomla! YouTube Gallery Component <= 4.1.7 'gallery.php' SQLi Vulnerability - Active Check

Joomla! YouTube Gallery Component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Video Gallery 2.5 Cross Site Scripting / SQL Injection

Wordpress Video Gallery Exploit Title : Wordpress Video Gallery 2.5 SQL Injection and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

WordPress Video Gallery Plugin 2.5 - Multiple Vulnerabilities

Video Gallery plugin is prone to multiple vulnerabilities, such as SQL injection and XSS vulnerabilities. Solution Upgrade the plugin...

WordPress Video Gallery Plugin 2.5 - Multiple Vulnerabilities

Video Gallery plugin is prone to multiple vulnerabilities, such as SQL injection and XSS vulnerabilities. Solution Upgrade the plugin...

WordPress Plugin Video Gallery 2.5 - Multiple Vulnerabilities

WordPress Plugin Video Gallery 2.5 - Multiple Vulnerabilities Wordpress Video Gallery Exploit Title : Wordpress Video Gallery 2.5 SQL Injection and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link...

WordPress Plugin Video Gallery 2.5 - Multiple Vulnerabilities

Wordpress Video Gallery Exploit Title : Wordpress Video Gallery 2.5 SQL Injection and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

Wordpress Plugin Gallery Objects 0.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Gallery Objects 0.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://galleryobjects.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-objects.0.4.zip Dork Google:...

CVE-2014-4960

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery comyoutubegallery component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 listid or 2 themeid parameter to index.php...

CVE-2014-4960

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery comyoutubegallery component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 listid or 2 themeid parameter to index.php...

CVE-2014-4960

CVE-2014-4960 affects Joomla! YouTube Gallery (com_youtubegallery) up to version 4.1.7 (possibly 3.x); SQL injection in models/gallery.php enables remote SQL execution via listid and themeid/mobilethemeid parameters in index.php. Evidence from multiple sources shows vulnerable code paths (e.g., J...