CVE-2016-1000124

CVE-2016-1000124 affects Joomla! Huge-IT Portfolio Gallery Plugin 1.0.6 with an unauthenticated SQL injection in ajax_url.php. The vulnerability stems from unsafely handling POST data (e.g., page, perpage, galleryid) enabling SQL injection. Documented exploitation references exist (Exploit-DB, 0d...

CVE-2016-1000123

CVE-2016-1000123 describes an unauthenticated SQL Injection in Huge-IT Video Gallery for Joomla (v1.0.9). The vulnerability arises in the Joomla component (and related com_videogallerylite Ajax URL handling) where user-controlled POST data (notably page and galleryid) is used to construct SQL que...

CVE-2016-1000125

Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000123

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

CVE-2016-1000124

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...

PT-2016-4517 · Huge It · Huge-It Catalog

Name of the Vulnerable Software and Affected Versions: Huge-IT Catalog version 1.0.7 Description: The issue is related to an unauthenticated SQL Injection. Recommendations: For version 1.0.7, update to a newer version that contains a fix for this issue...

PT-2016-4516 · Huge It · Huge-It Portfolio Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Huge-IT Portfolio Gallery Plugin version 1.0.6 Description: The issue is related to an unauthenticated SQL Injection. No information is provided about the estimated number of potentially affected devices or real-world incidents...

PT-2016-4515 · Huge It · Huge-It Video Gallery

Name of the Vulnerable Software and Affected Versions: Huge-IT Video Gallery version 1.0.9 Description: The issue is related to an unauthenticated SQL Injection. Recommendations: For version 1.0.9, update to a newer version that contains a fix for this issue, if available. At the moment, there is...

Joomla Huge-IT Portfolio Gallery 1.0.6 SQL Injection Vulnerability

Joomla Huge-IT Portfolio Gallery plugin version 1.0.6 suffers from a remote SQL injection vulnerability. Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery...

Joomla Huge-IT Portfolio Gallery 1.0.6 SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description: Huge-IT...

Huge IT Slider,1.0.9,SQL Injection

Huge IT Slider,1.0.9,SQL Injection Resolution: update to 1.1.0 update notice: https://huge-it.com/joomla-extensions-security-notice/...

Huge IT Video Gallery,1.1.1,XSS (Cross Site Scripting)

Huge IT Video Gallery,1.1.1,XSS Cross Site Scripting Also versions 1.0.9 and previous have SQL injection vulnerability Resolution: update to version 1.1.3 Update notice: https://huge-it.com/joomla-extensions-security-notice/...

Joomla Huge-IT Video Gallery 1.0.9 SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified: 2016-09-17 Vendor Contact: [email protected]...

Joomla! Component com_videogallerylite 1.0.9 - SQL Injection

Joomla! Component comvideogallerylite 1.0.9 - SQL Injection Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor...

Joomla Huge-IT Video Gallery 1.0.9 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified...

Joomla! Component Portfolio Gallery 1.0.6 - SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Joomla extension v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description:...

Joomla! Component Catalog 1.0.7 - SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-catalog/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description: Huge-IT Product Catalog i...

Joomla! Component Catalog 1.0.7 - SQL Injection

Joomla! Component Catalog 1.0.7 - SQL Injection Title: Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-catalog/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact:...

Huge-IT Slideshow SQL Injection Vulnerability

Huge-IT Slideshow is an extension developed by the Huge-IT team for use in Joomla! to attract visitors by improving the style and character of your website. Huge-IT Slideshow v1.0.4 in . /models/slideshow.php file contains a SQL injection vulnerability. An attacker can exploit this vulnerability ...