EUVD-2017-1629

Malware in sbrugna...

EUVD-2017-1628

Malware in sbrugna...

CVE-2017-1002011

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-galleryname and $value-gallerydescription where anyone with privileges to modify or add galleries/images and inject javascript into the database...

CVE-2017-1002014

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...

CVE-2017-1002012

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...

Wordpress plugin image-gallery-with-slideshow SQL injection vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. Wordpress plugin image-gallery-with-slideshow SQL injection vulnerability, the vulnerability stems from the program failing t...

Anblik WordPress image-gallery-with-slideshow SQL Injection Vulnerability

Anblik WordPress image-gallery-with-slideshow is a slideshow plugin for WordPress developed by Anblik Web Design India. A SQL injection vulnerability exists in the image-gallery-with-slideshow/adminsetting.php file in Anblik WordPress image-gallery-with-slideshow version 1.5.2. A remote attacker...

CVE-2017-1002012

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...

CVE-2017-1002012: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/adminsetting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement...

PT-2017-11004

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a Blind SQL Injection in the image-gallery-with-slideshow plugin. This occurs via the selectMulGallery parameter in the image-gallery-with-slideshow/admin setting.p...

CVE-2017-1002013: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/adminsetting.php...

PT-2017-11000

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a stored XSS vulnerability. This vulnerability can be exploited via the gallery name and gallery description variables, allowing attackers with privileges to modify...

CVE-2017-1002014: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via galleryname parameter...

CVE-2017-1002011: Improper Neutralization of Input During Web Page Generation

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value-galleryname and $value-gallerydescription where anyone with privileges to modify or add galleries/images and inject javascript into the database...

PT-2017-11002

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue is related to a Blind SQL Injection vulnerability. It can be exploited via the imgid parameter in the "image-gallery-with-slideshow/admin setting.php" endpoint. Recommendations F...

PT-2017-11003

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue concerns a Blind SQL Injection in the image-gallery-with-slideshow plugin. This occurs via the gallery name parameter in the admin setting.php file. Recommendations For version...

PT-2017-11001

Name of the Vulnerable Software and Affected Versions image-gallery-with-slideshow version 1.5.2 Description The issue concerns a lack of input sanitization in the gid variable, which is then used in an SQL statement. This occurs in the admin setting.php file of the image-gallery-with-slideshow...

CVE-2017-1002015: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/adminsetting.php via selectMulGallery parameter...