colosseorestaurant.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-676780 Description| Value ---|--- Affected Website:| colosseorestaurant.co.uk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

albertsartgallery.nl Improper Access Control vulnerability

Open Bug Bounty ID: OBB-641914 Description| Value ---|--- Affected Website:| albertsartgallery.nl Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| IAC Improper Access Control / CWE-284 CVSSv3 Score:| 6.5...

PT-2018-10976

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Schools Alert Management Script affected versions not specified Description The issue concerns SQL Injections in PHP Scripts Mall Schools Alert Management Script. Specifically, the vulnerability exists via crafted POST data in...

aerotechdesigns.biz XSS vulnerability

Open Bug Bounty ID: OBB-615538 Description| Value ---|--- Affected Website:| aerotechdesigns.biz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress mgl-instagram-gallery plugin cross-site scripting vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site. mgl-instagram-gallery plugin is used in one of the responsive gallery plugin. A cross-site scripting...

CVE-2017-17869

The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...

Design/Logic Flaw

The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...

CVE-2017-17869: Improper Neutralization of Input During Web Page Generation

The mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter...

CVE-2017-17869

The CVE-2017-17869 entry concerns the WordPress plugin mgl-instagram-gallery . A Cross‑Site Scripting (XSS) vulnerability exists in the plugin’s single-gallery.php file via the media parameter, as described by CVE entries and CNVD/NVD records. The issue is caused by handling the media parameter i...

PT-2017-15058

Name of the Vulnerable Software and Affected Versions mgl-instagram-gallery plugin for WordPress affected versions not specified Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved through the media parameter in the single-gallery.ph...

WordPress mgl-instagram-gallery Plugin Cross Site Scripting Vulnerability

Exploit for php platform in category web applications + Title: WordPress mgl-instagram-gallery Plugin Cross Site Scripting XSS + Author: Mostafa Gharzi + Vendor Homepage: www.Wordpress.org , www.pluginu.com/mgl-instagram-gallery/ + Tested on: Windows 10 & Kali Linux + Vulnerable File:...

WordPress Grand Flagallery Plugin Information Disclosure Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform using PHP language development, the platform supports in PHP and MySQL server set up personal blog site.Grand Flagallery plugin is one of the integration of photo gallery, video gallery and music albums in one of the media...

PT-2017-6240

Name of the Vulnerable Software and Affected Versions Grand Flagallery plugin versions prior to 4.25 Description The issue allows remote attackers to obtain the installation path. This can be achieved by sending a request to API endpoints such as "flagallery-skins/banner widget default/gallery.ph...

CVE-2017-1002028

Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query...

Sql injection

Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query...

CVE-2017-1002028

Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query...

lunastage.org XSS vulnerability

Open Bug Bounty ID: OBB-295764 Description| Value ---|--- Affected Website:| lunastage.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PT-2017-11017

Name of the Vulnerable Software and Affected Versions wordpress-gallery-transformation version 1.0 Description The issue concerns an SQL injection flaw in the wordpress-gallery-transformation plugin. Specifically, the gallery.php file is vulnerable due to the $jpic parameter being unsanitized...

CVE-2017-1002028: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin wordpress-gallery-transformation v1.0, SQL injection is in ./wordpress-gallery-transformation/gallery.php via $jpic parameter being unsanitized before being passed into an SQL query...

mediafab.ch XSS vulnerability

Vulnerable URL: https://www.mediafab.ch/gallery.php?mode=gallery=136=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated...