EUVD-2016-1058

Malware in sbrugna...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

Sql injection

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

PT-2020-7949

Name of the Vulnerable Software and Affected Versions: Huge-IT gallery-images plugin versions prior to 1.9.0 Description: An issue was discovered in the Huge-IT gallery-images plugin, where the headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is...

CVE-2016-11018: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000113

XSS and SQLi in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000113: Improper Neutralization of Special Elements used in an SQL Command

XSS and SQLi in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000114: Improper Neutralization of Input During Web Page Generation

XSS in huge IT gallery v1.1.5 for Joomla...

PT-2016-4506

Name of the Vulnerable Software and Affected Versions Huge IT Gallery version 1.1.5 Description The issue is related to a Cross-Site Scripting XSS problem. Recommendations For version 1.1.5, update to a newer version that contains a fix for this issue...

PT-2016-4505

Name of the Vulnerable Software and Affected Versions Huge IT Gallery version 1.1.5 Description The issue involves XSS and SQLi in the software, which can lead to security breaches. Recommendations For version 1.1.5, update to a newer version that contains a fix for this issue, if available. At t...

Joomla Huge IT Gallery 1.1.5 Cross Site Scripting / SQL Injection

Title: XSS and SQLi in huge IT gallery v1.1.5 for Joomla Author: Larry W. Cashdollar, @larry0 Elitza Neytcheva, @E1337za Date: 2016-07-14 Download Site: http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-pro Vendor: huge-it.com Vendor Notified: 2016-07-15, fixed...