EUVD-2016-1068

Malware in sbrugna...

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.6 - SQL Injection

Exploit Title Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Date: 2016-09-16 Exploit Author: Larry W. Cashdollar, @larry0 Vendor Homepage: http://huge-it.com/joomla-portfolio-gallery/ Software Link: Version: 1.0.6 Tested on: Linux CVE : CVE-2016-1000124 Advisory:...

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.7 - SQL Injection

Exploit Title Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla Date: 2016-09-16 Exploit Author: Larry W. Cashdollar, @larry0 Vendor Homepage: http://huge-it.com/joomla-catalog/ Software Link: Version: 1.0.7 Tested on: Linux CVE : CVE-2016-1000125 Advisory:...

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.6 - SQL Injection

Joomla! Component Huge-IT Portfolio Gallery Plugin 1.0.6 - SQL Injection Exploit Title Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Date: 2016-09-16 Exploit Author: Larry W. Cashdollar, @larry0 Vendor Homepage: http://huge-it.com/joomla-portfolio-gallery/ Software Link...

Joomla Portfolio Gallery 1.0.6 Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Joomla extension v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery/ Vendor: huge-it.com Vendor Notified:...

CVE-2016-1000116

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS...

Sql injection

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...

CVE-2016-1000124

CVE-2016-1000124 affects Joomla! Huge-IT Portfolio Gallery Plugin 1.0.6 with an unauthenticated SQL injection in ajax_url.php. The vulnerability stems from unsafely handling POST data (e.g., page, perpage, galleryid) enabling SQL injection. Documented exploitation references exist (Exploit-DB, 0d...

CVE-2016-1000124

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...

Joomla! Component Portfolio Gallery 1.0.6 - SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Joomla extension v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description:...

Huge IT Portfolio Gallery 1.0.7 and previous

Huge IT Portfolio Gallery 1.0.7 and previous Security updates connected with CSRF and XSS resolution: update to 1.1.0...