CVE-2016-1000124

CVE-2016-1000124 affects Joomla! Huge-IT Portfolio Gallery Plugin 1.0.6 with an unauthenticated SQL injection in ajax_url.php. The vulnerability stems from unsafely handling POST data (e.g., page, perpage, galleryid) enabling SQL injection. Documented exploitation references exist (Exploit-DB, 0d...

CVE-2016-1000125

The CVE-2016-1000125 entry concerns Huge-IT Catalog for Joomla (version 1.0.7). The connected sources provide concrete details: an unauthenticated SQL injection vulnerability in the component’s ajax_url.php logic (load_more_elements_into_catalog) accessible via POST parameters (e.g., catalog_id)....

CVE-2016-1000114

CVE-2016-1000114 corresponds to an XSS vulnerability in Joomla! Huge-IT Image Gallery extension v1.1.5. The CNVD entry notes two flaws in this version: a cross-site scripting issue and a SQL injection vulnerability arising from inadequate input filtering of user-submitted data. The description im...

CVE-2016-1000125

Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla...

CVE-2016-1000123

CVE-2016-1000123 describes an unauthenticated SQL Injection in Huge-IT Video Gallery for Joomla (v1.0.9). The vulnerability arises in the Joomla component (and related com_videogallerylite Ajax URL handling) where user-controlled POST data (notably page and galleryid) is used to construct SQL que...

CVE-2016-1000114

XSS in huge IT gallery v1.1.5 for Joomla...

CVE-2016-1000123

Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla...

CVE-2016-1000124

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...

CVE-2016-1000113

CVE-2016-1000113 affects Joomla! Huge-IT Image Gallery extension (v1.1.5). Reported XSS and SQL injection flaws stem from insufficient input validation in the gallery plugin (notably id parameter handling in admin/gallery.php). Impact per the records includes potential disclosure or modification ...

PT-2016-4517 · Huge It · Huge-It Catalog

Name of the Vulnerable Software and Affected Versions: Huge-IT Catalog version 1.0.7 Description: The issue is related to an unauthenticated SQL Injection. Recommendations: For version 1.0.7, update to a newer version that contains a fix for this issue...

PT-2016-4515 · Huge It · Huge-It Video Gallery

Name of the Vulnerable Software and Affected Versions: Huge-IT Video Gallery version 1.0.9 Description: The issue is related to an unauthenticated SQL Injection. Recommendations: For version 1.0.9, update to a newer version that contains a fix for this issue, if available. At the moment, there is...

PT-2016-4516 · Huge It · Huge-It Portfolio Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Huge-IT Portfolio Gallery Plugin version 1.0.6 Description: The issue is related to an unauthenticated SQL Injection. No information is provided about the estimated number of potentially affected devices or real-world incidents...

IoT Botnets Are The New Normal of DDoS Attacks

If you’ve been on the wrong end of what passes for a modern-day DDoS attack, you’re well familiar with the firepower of the almighty DVR. That’s right, the innocuous set-top box responsible for the posterity of your Game of Thrones seasons 1-6 is behind some of the biggest swarming attacks agains...

Joomla Huge-IT Portfolio Gallery 1.0.6 SQL Injection Vulnerability

Joomla Huge-IT Portfolio Gallery plugin version 1.0.6 suffers from a remote SQL injection vulnerability. Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery...

Joomla Huge-IT Portfolio Gallery 1.0.6 SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 Author: Larry W. Cashdollar, @larry0 Date: 2016-09-16 Download Site: http://huge-it.com/joomla-portfolio-gallery/ Vendor: huge-it.com Vendor Notified: 2016-09-17 Vendor Contact: [email protected] Description: Huge-IT...

Huge IT Slider,1.0.9,SQL Injection

Huge IT Slider,1.0.9,SQL Injection Resolution: update to 1.1.0 update notice: https://huge-it.com/joomla-extensions-security-notice/...

Huge IT Video Gallery,1.1.1,XSS (Cross Site Scripting)

Huge IT Video Gallery,1.1.1,XSS Cross Site Scripting Also versions 1.0.9 and previous have SQL injection vulnerability Resolution: update to version 1.1.3 Update notice: https://huge-it.com/joomla-extensions-security-notice/...

Error: "AddOrRemoveSSONProvOrder: Could Not Open Key for Access" While Installing Receiver 14.4.1

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. "AddOrRemoveSSONProvOrder: Could not open key for access."...

Joomla Huge-IT Video Gallery 1.0.9 SQL Injection

Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor Notified: 2016-09-17 Vendor Contact: [email protected]...

Joomla! Component com_videogallerylite 1.0.9 - SQL Injection

Joomla! Component comvideogallerylite 1.0.9 - SQL Injection Title: Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla Author: Larry W. Cashdollar, @larry0 Date: 2016-09-15 Download Site: http://huge-it.com/joomla-video-gallery/ Vendor: www.huge-it.com, fixed v1.1.0 Vendor...