EUVD-2016-1058

Malware in sbrugna...

EUVD-2016-1057

Malware in sbrugna...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

Sql injection

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

CVE-2016-11018

An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is hugeitimagegalleryajaxcallback...

Huge IT gallery,1.1.5,SQL Injection

Huge IT gallery,1.1.5,SQL Injection resolution: update to 1.1.9...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000113

XSS and SQLi in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000113

XSS and SQLi in huge IT gallery v1.1.5 for Joomla...

Design/Logic Flaw

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000113

CVE-2016-1000113 affects Joomla! Huge-IT Image Gallery extension (v1.1.5). Reported XSS and SQL injection flaws stem from insufficient input validation in the gallery plugin (notably id parameter handling in admin/gallery.php). Impact per the records includes potential disclosure or modification ...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000114

CVE-2016-1000114 corresponds to an XSS vulnerability in Joomla! Huge-IT Image Gallery extension v1.1.5. The CNVD entry notes two flaws in this version: a cross-site scripting issue and a SQL injection vulnerability arising from inadequate input filtering of user-submitted data. The description im...

Joomla Huge IT Gallery 1.1.5 Cross Site Scripting / SQL Injection

Title: XSS and SQLi in huge IT gallery v1.1.5 for Joomla Author: Larry W. Cashdollar, @larry0 Elitza Neytcheva, @E1337za Date: 2016-07-14 Download Site: http://extensions.joomla.org/extensions/extension/photos-a-images/galleries/gallery-pro Vendor: huge-it.com Vendor Notified: 2016-07-15, fixed...