Singapore 0.9.9b Beta - Image Gallery Remote File Inclusion Cross-Site Scripting

Singapore 0.9.9b Beta - Image Gallery Remote File Inclusion Cross-Site Scripting source: https://www.securityfocus.com/bid/65420/info Singapore Image Gallery is prone to a remote file-include vulnerability and a cross-site scripting vulnerability because the application fails to properly sanitize...

WordPress Plugin Global Flash Gallery - swfupload.php Arbitrary File Upload

WordPress Plugin Global Flash Gallery - swfupload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/65060/info The Global Flash Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly...

WordPress Global Flash Gallery Plugin - Arbitrary File Upload

Global Flash Gallery plugin is prone to an arbitrary file upload vulnerability via "swfupload.php" that allows upload arbitrary files. This can result in arbitrary code execution within the context of the vulnerable application. Solution Upgrade the plugin...

WordPress Global Flash Gallery Plugin - Arbitrary File Upload

Global Flash Gallery plugin is prone to an arbitrary file upload vulnerability via "swfupload.php" that allows upload arbitrary files. This can result in arbitrary code execution within the context of the vulnerable application. Solution Upgrade the plugin...

WordPress DT Chocolate Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress DT Chocolate jplayer.swf Cross Site Scripting vulnerability + Date: 13-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress Theme DT...

[SOJOBO-ADV-13-03] - Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting

SOJOBO-ADV-13-03 - Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting I. Information ================== Name : Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting Software : Gallery Bank 2.0.19 and possibly below. Vendor Homepage : http://gallery-bank.com/...

WordPress DZS Video Gallery 3.1.3 Remote File Disclosure

Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File: preview.php Date: 03/12/2013 Explo...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote and Local File Disclosure Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version:...

Wordpress page-flip-image-gallery plugins Remote File Upload

Exploit for php platform in category web applications Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...

WordPress Page Flip Image Gallery Shell Upload

Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link : http://downloads.wordpress.org/plugin/page-flip-image-gallery.zip Google dork:...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure Local File Disclosure

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure Local File Disclosure Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage:...

WordPress DZS Video Gallery Plugin 3.1.3 - Remote and Local File Disclosure Vulnerabilities

DZS Video Gallery plugin is prone to remote and local files disclosure vulnerabilities. Solution Upgrade the plugin...

WordPress Plugin page-flip-image-gallery - Arbitrary File Upload

WordPress Plugin page-flip-image-gallery - Arbitrary File Upload Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...

WordPress Plugin page-flip-image-gallery - Arbitrary File Upload

Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link : http://downloads.wordpress.org/plugin/page-flip-image-gallery.zip Google dork:...

WordPress Page Flip Image Gallery Plugins - Remote File Upload

Page Flip Image Gallery plugin is prone to a remote file upload vulnerability. Solution Upgrade the plugin...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure / Local File Disclosure

Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File: preview.php Date: 03/12/2013 Explo...

WordPress DZS Video Gallery Plugin - Remote File Upload

WordPress DZS Video Gallery plugin is prone to a remote file upload vulnerability. Solution Upgrade the plugin...

WordPress Gallery Bank 2.0.19 Cross Site Scripting

SOJOBO-ADV-13-03 - Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting I. Information ================== Name : Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting Software : Gallery Bank 2.0.19 and possibly below. Vendor Homepage : http://gallery-bank.com/...

Contexis CMS 1.0 Cross Site Scripting

CVE-2013-6239:Contexis 1.0 CMS, Reflected Xss Severity: Medium Vendor: exis-ti.com Versions Affected: 1.0 Description: The contexist has be found the reflected XSS Vulnerability if use the photo gallery model someone can insert xss code at the url executing javascript codes on the web. Exploit: G...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...