Joomla Component Youtube Gallery XSS Vulnerability

Joomla! component youtube gallery is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla Youtube Gallery 3.4.0 Cross Site Scripting

Hello, Cross-site scripting XSS vulnerability in the Youtube Gallery 3.4.0 component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the videofile parameter to /includes/flvthumbnail.php. POC:...

WordPress Lazyest Gallery Plugin <= 1.1.20 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via an EXIF tag. Solution Update the plugin...

WordPress NextGEN Gallery 'jqueryFileTree.php' Directory Traversal Vulnerability

WordPress NextGEN Gallery Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Plugin Premium Gallery Manager - Arbitrary File Upload

WordPress Plugin Premium Gallery Manager - Arbitrary File Upload source: https://www.securityfocus.com/bid/66044/info Premium Gallery Manager plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker can exploit this vulnerability to upload arbitrary...

WordPress Premium Gallery Manager Plugin - Arbitrary File Upload

Premium Gallery Manager plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...

WordPress Premium Gallery Manager Shell Upload

Wordpress Plugins Premium Gallery Manager Arbitrary File Upload Author : eX-Sh1Ne Facebook : www.fb.me/ShiNe.gov Google Dork = inurl:"wp-content/plugins/PremiumGalleryManager" Vuln : wp-content/plugins/PremiumGalleryManager/uploadify/uploadify.php Exploit : "@$uploadfile",...

WordPress Plugin Premium Gallery Manager - Arbitrary File Upload

source: https://www.securityfocus.com/bid/66044/info Premium Gallery Manager plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the web server process. This m...

CVE-2013-3478

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php...

Sql injection

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php...

CVE-2013-3478

Apptha WordPress Video Gallery plugin (WordPress, versions 2.0, 1.6 and earlier) is affected by a SQL injection in the playid parameter of index.php. The underlying issue allows remote attackers to execute arbitrary SQL commands. Reported CVE-2013-3478 details are corroborated by multiple sources...

WordPress Easy Media Gallery多个跨站脚本漏洞

Bugtraq ID:65804 WordPress是一种使用PHP语言开发的博客平台，用户可以在支持PHP和MySQL数据库的服务器上架设自己的网志。 WordPress EasyMedia Gallery插件不正确过滤用户提交的参数，远程攻击者可以利用漏洞构建恶意URI，诱使用户解析，可获得敏感Cookie，劫持会话或在客户端上进行恶意操作。 0 WordPress EasyMedia Gallery 1.2.29 目前没有详细解决方案提供： http://wordpress.org/plugins/...

WordPress EasyMedia Gallery 1.2.29 Cross Site Scripting

============================================================== Title ...| EasyMedia Gallery XSS Version .| easy-media-gallery.1.2.29 Date ....| 23.02.2014 Found ...| HauntIT Blog Home ....| http://wordpress.org/plugins/ ==============================================================...

WordPress NextGEN Gallery目录遍历漏洞

WordPress是一款内容管理系统。 WordPress NextGEN Gallery存在目录遍历漏洞，由于未验证POST请求带有特定参数的特定URI可以列出任意目录的内容。 0 NextGEN Gallery 2.0.0 厂商补丁： WordPress ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://wordpress.org/plugins/nextgen-gallery/ curl -i -d 'dir=/etc/'...

WordPress Plugin NextGEN Gallery - jqueryFileTree.php Directory Traversal

WordPress Plugin NextGEN Gallery - jqueryFileTree.php Directory Traversal source: https://www.securityfocus.com/bid/65637/info The NextGEN Gallery plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this...

WordPress NextGEN Gallery Plugin - Directory Traversal

This NextGEN Gallery plugin is prone to a directory-traversal vulnerability via "jqueryFileTree.php". It fails to clean up user-supplied input. Using this plugin an attacker can obtain important information which could aid in further attacks. Solution Upgrade the plugin...

NextGEN Gallery 2.0.0 Directory Traversal

https://security.dxw.com/advisories/directory-traversal-in-nextgen-gallery-2-0-0/ Details ================ Software: NextGEN Gallery Version: 2.0.0 Homepage: http://wordpress.org/plugins/nextgen-gallery/ CVSS: 5 Medium; AV:N/AC:L/Au:N/C:P/I:N/A:N Description ================ Directory traversal i...

WordPress Plugin NextGEN Gallery - 'jqueryFileTree.php' Directory Traversal

source: https://www.securityfocus.com/bid/65637/info The NextGEN Gallery plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid i...

WordPress DZS Video Gallery 'source' Parameter Cross Site Scripting Vulnerability

WordPress DZS Video Gallery Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Access Bypass in extensions "Yet Another Gallery" (yag) and "Tools for Extbase development" (pt_extbase)

It has been discovered that the extensions "Yet Another Gallery" yag and "Tools for Extbase development" ptextbase are susceptible to Access Bypass Release Date: February 12, 2014 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected...