CVE-2013-5956

CVE-2013-5956 describes a cross-site scripting (XSS) flaw in the Joomla! component Youtube Gallery (com_youtubegallery) version 3.4.0, specifically in the file includes/flvthumbnail.php . The vulnerability allows remote attackers to inject arbitrary web script or HTML via the videofile parameter....

Flash Photo Gallery <= 0.7 - XSS

Plugin is still affected and has been closed...

Mambo Gallery Manager help.mgm.php mosConfig_absolute_path Parameter PHP Code Execution - Ver2 (CVE-2006-3980)

A code execution vulnerability has been reported in Mambo Gallery Manager. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Researchers Get $10,000 for Hacking Google Server with Malicious XML

A critical vulnerability has been uncovered in Google that could allow an attacker to access the internal files of Google’s production servers. Sounds ridiculous but has been proven by the security researchers from Detectify. The vulnerability resides in the Toolbar Button Gallery as shown. The...

CVE-2014-2333

Cross-site scripting XSS vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information...

Cross site scripting

Cross-site scripting XSS vulnerability in the Lazyest Gallery plugin before 1.1.21 for WordPress allows remote attackers to inject arbitrary web script or HTML via an EXIF tag. NOTE: some of these details are obtained from third party information...

CVE-2014-2333

CVE-2014-2333 affects the WordPress plugin Lazyest Gallery (pre-1.1.21). The vulnerability is a stored/reflected XSS via an EXIF tag in the image handling code, enabling remote attackers to inject arbitrary script or HTML. Public details come from NVD/NVD-related feeds and WPVulnDB entries; explo...

WordPress Complete Gallery Manager Plugin Arbitrary Code Execution - Ver2 (CVE-2013-5962)

A code execution vulnerability has been reported in Envato Complete Gallery Manager Plugin for WordPress. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Bharat Mediratta Gallery captionator.php GALLERY_BASEDIR Parameter PHP Code Execution - Ver2 (CVE-2002-1412)

A code execution vulnerability has been reported in Gallery Project Gallery. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

WordPress File Gallery Plugin <= 1.7.9.1 - Arbitrary Code Execution

This plugin does not properly escape strings, which allows remote administrators to execute arbitrary PHP code. Solution Update the plugin...

Joomla Component Youtube Gallery XSS Vulnerability

Joomla! component youtube gallery is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla Youtube Gallery 3.4.0 Cross Site Scripting

Hello, Cross-site scripting XSS vulnerability in the Youtube Gallery 3.4.0 component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the videofile parameter to /includes/flvthumbnail.php. POC:...

WordPress Lazyest Gallery Plugin <= 1.1.20 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via an EXIF tag. Solution Update the plugin...

WordPress NextGEN Gallery 'jqueryFileTree.php' Directory Traversal Vulnerability

WordPress NextGEN Gallery Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Plugin Premium Gallery Manager - Arbitrary File Upload

WordPress Plugin Premium Gallery Manager - Arbitrary File Upload source: https://www.securityfocus.com/bid/66044/info Premium Gallery Manager plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker can exploit this vulnerability to upload arbitrary...

WordPress Premium Gallery Manager Plugin - Arbitrary File Upload

Premium Gallery Manager plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...

WordPress Premium Gallery Manager Shell Upload

Wordpress Plugins Premium Gallery Manager Arbitrary File Upload Author : eX-Sh1Ne Facebook : www.fb.me/ShiNe.gov Google Dork = inurl:"wp-content/plugins/PremiumGalleryManager" Vuln : wp-content/plugins/PremiumGalleryManager/uploadify/uploadify.php Exploit : "@$uploadfile",...

WordPress Plugin Premium Gallery Manager - Arbitrary File Upload

source: https://www.securityfocus.com/bid/66044/info Premium Gallery Manager plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the web server process. This m...

CVE-2013-3478

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php...

Sql injection

SQL injection vulnerability in Apptha WordPress Video Gallery 2.0, 1.6, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the playid parameter to index.php...