WordPress Plugin Video Gallery 2.5 - Multiple Vulnerabilities

Wordpress Video Gallery Exploit Title : Wordpress Video Gallery 2.5 SQL Injection and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.apptha.com/category/extension/Wordpress/Video-Gallery Software Link :...

WordPress Video Gallery Plugin 2.5 - Multiple Vulnerabilities

Video Gallery plugin is prone to multiple vulnerabilities, such as SQL injection and XSS vulnerabilities. Solution Upgrade the plugin...

WordPress Video Gallery Plugin 2.5 - Multiple Vulnerabilities

Video Gallery plugin is prone to multiple vulnerabilities, such as SQL injection and XSS vulnerabilities. Solution Upgrade the plugin...

Wordpress Plugin Gallery Objects 0.4 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title : Wordpress Gallery Objects 0.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://galleryobjects.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-objects.0.4.zip Dork Google:...

CVE-2014-4960

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery comyoutubegallery component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 listid or 2 themeid parameter to index.php...

CVE-2014-4960

Multiple SQL injection vulnerabilities in models\gallery.php in Youtube Gallery comyoutubegallery component 4.x through 4.1.7, and possibly 3.x, for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 listid or 2 themeid parameter to index.php...

CVE-2014-4960

CVE-2014-4960 affects Joomla! YouTube Gallery (com_youtubegallery) up to version 4.1.7 (possibly 3.x); SQL injection in models/gallery.php enables remote SQL execution via listid and themeid/mobilethemeid parameters in index.php. Evidence from multiple sources shows vulnerable code paths (e.g., J...

youtube gallery, 4.1.7,

youtube gallery, 4.1.7, SQL Injection Extension Update Details 4.1.9 UpdateNoticeURL http://www.joomlaboat.com/youtube-gallery...

WordPress Plugin Gallery Objects 0.4 - SQL Injection

WordPress Plugin Gallery Objects 0.4 - SQL Injection Exploit Title : Wordpress Gallery Objects 0.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://galleryobjects.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-objects.0.4.zip Dork Google:...

WordPress Gallery Objects Plugin 0.4 - SQL Injection

This WordPress Gallery Objects plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...

WordPress Plugin Gallery Objects 0.4 - SQL Injection

Exploit Title : Wordpress Gallery Objects 0.4 SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://galleryobjects.com/ Software Link : http://downloads.wordpress.org/plugin/gallery-objects.0.4.zip Dork Google: inurl:/admin-ajax.php?action=goviewobject Date : 2014-07-18 Tested o...

Joomla Youtube Gallery Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh email protected Vendor Homepage:...

Joomla Youtube Gallery Component - SQL Injection Vulnerability

No description provided by source...

WordPress Tidio Gallery 1.1 Shell Upload / XSS

Exploit Title : Wordpress Tidio Gallery 1.1 Shell Upload and XSS Vulnerabilities Exploit Author : Claudio Viviani Vendor Homepage : http://www.tidioelements.com/ Software Link : http://downloads.wordpress.org/plugin/tidio-gallery.zip Date : 2014-07-14 Tested on : Windows 7 / Mozilla Firefox...

WordPress DZS Video Gallery XSS / Path Disclosure / Command Execution

Hello list! These are Cross-Site Scripting, Full path disclosure and OS Commanding vulnerabilities in plugin DZS Video Gallery for WordPress. Earlier I've disclosed Content Spoofing and Cross-Site Scripting vulnerabilities in this plugin http://securityvulns.ru/docs30871.html...

WordPress DZS Video Gallery Plugin - Cross Site Scripting and Command Injection Vulnerabilities

Because of these vulnerabilities in DZS Video Gallery plugin, an attacker can execute arbitrary script code in the browser and execute arbitrary OS commands. In that way an attacker can steal cookie-based authentication credentials and launch other attacks. Solution Upgrade the plugin...

Uzbey: IFXSS (image filename XSS) by creating a new Photo Gallery

Hello team! I think I've found a Stored XSS in the Photo Gallery. To reprodruce the possible vulnerability we must: 1. Login into our account. 2. Go to https://staging.uzbey.com/user/other-albums and click on the "add new album" button. 3. Add random values and any image with this name ---...

nightgallery.ca XSS vulnerability

Vulnerable URL: http://nightgallery.ca/event.php?id=%27%22%3E%3Cscript%3Ealert%28/XSSPOSED/%29;%3C/script%3E Details: Description| Value ---|--- Patched:| Yes, at 21.11.2017 Latest check for patch:| 21.11.2017 18:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank...

WordPress NextGEN Gallery 2.0.63 Shell Upload Vulnerability

WordPress NextGEN Gallery plugin version 2.0.63 suffers from a remote shell upload vulnerability. Exploit Title: Wordpress NextGEN Gallery Plugin 2.0.63 Arbitrary File Upload Author: SANTHO @s4n7h0 Vendor Homepage: http://wordpress.org/plugins/nextgen-gallery/ Category: WebApp / CMS / Wordpress...

WordPress NextGEN Gallery 2.0.63 Shell Upload

Exploit Title: Wordpress NextGEN Gallery Plugin 2.0.63 Arbitrary File Upload Author: SANTHO @s4n7h0 Vendor Homepage: http://wordpress.org/plugins/nextgen-gallery/ Category: WebApp / CMS / Wordpress Version: 2.0.63 and less --------------------------------------------------- Vulnerability Tracking...