132 matches found
CVE-2016-1000116
Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...
CVE-2016-1000119
The CVE-2016-1000119 entry concerns the Huge IT Joomla Catalog Extension 1.0.4 for Joomla. Public details describe two vulnerabilities: a SQL Injection and a Reflected Cross-Site Scripting (XSS). The SQLi occurs in the submissions model (id parameter) and the XSS in the submissions view (message_...
CVE-2016-1000116
CVE-2016-1000116 pertains to Huge-IT Portfolio Gallery manager. Connected sources identify a SQL Injection and XSS flaw affecting the product, with specific references to version 1.1.0 (Huge-IT Portfolio Gallery manager v1.1.0). Some entries also mention v1.1.5 as affected, indicating variants wi...
CVE-2016-1000115
Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...
PT-2016-4508 · Huge It · Huge-It Portfolio Gallery Manager
Name of the Vulnerable Software and Affected Versions: Huge-IT Portfolio Gallery manager version 1.1.0 Description: The issue concerns SQL Injection and XSS in the Huge-IT Portfolio Gallery manager. No further details are provided about the nature of the issue, affected devices, or real-world...
PT-2016-4507 · Huge It · Huge-It Portfolio Gallery Manager
Name of the Vulnerable Software and Affected Versions: Huge-IT Portfolio Gallery manager version 1.1.0 Description: The issue concerns SQL Injection and XSS in the Huge-IT Portfolio Gallery manager. No information is provided about the estimated number of potentially affected devices or real-worl...
Huge-IT Catalog Extension SQL Injection Vulnerability in Joomla!
Joomla! is an open source content management system CMS developed by the Open Source Matters team in the U.S. Huge-IT Catalog is one of the extensions that showcases products in the most attractive way. A SQL injection vulnerability exists in version 1.0.7 of the Joomla! Huge-IT Catalog extension...
CVE-2016-1000125
Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla...
CVE-2016-1000125
Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla...
CVE-2016-1000124
Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...
CVE-2016-1000124
Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...
CVE-2016-1000123
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...
CVE-2016-1000123
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...
CVE-2016-1000114
XSS in huge IT gallery v1.1.5 for Joomla...
CVE-2016-1000114
XSS in huge IT gallery v1.1.5 for Joomla...
CVE-2016-1000113
XSS and SQLi in huge IT gallery v1.1.5 for Joomla...
Sql injection
Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla...
Sql injection
Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...
Sql injection
Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...
CVE-2016-1000124
CVE-2016-1000124 affects Joomla! Huge-IT Portfolio Gallery Plugin 1.0.6 with an unauthenticated SQL injection in ajax_url.php. The vulnerability stems from unsafely handling POST data (e.g., page, perpage, galleryid) enabling SQL injection. Documented exploitation references exist (Exploit-DB, 0d...