14 matches found
CVE-2026-94130
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries...
CVE-2026-94130
The YouTube Gallery extension for Joomla (by joomlaboat.com) is vulnerable to an unauthenticated SQL injection (CWE-89) in versions 1.0.0 through 5.7.2 . The flaw exists in the video search and sorting request handling, where attackers can inject SQL commands into read queries via the public yg_a...
CVE-2026-94130 Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries...
EUVD-2026-87771
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries...
CVE-2026-94130 Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries...
PT-2026-99392
Name of the Vulnerable Software and Affected Versions YouTube Gallery versions 1.0.0 through 5.7.2 Description An unauthenticated SQL injection exists in the video search functionality and the router that maps friendly video URLs to database rows. This flaw allows attackers to inject SQL commands...
CVE-2026-94130: Improper Neutralization of Special Elements used in an SQL Command
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension 5.7.3 - An SQL injection vulnerability in video search functionality and sorting allowed attackers to inject SQL commands in read queries...
acoolive.com XSS vulnerability
Open Bug Bounty ID: OBB-448490 Description| Value ---|--- Affected Website:| acoolive.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...
vrsmash.com XSS vulnerability
Vulnerable URL: https://www.vrsmash.com/video/search?query=%22%3E%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 85684 VIP website status:| No...
sports.espn.go.com XSS vulnerability
Vulnerable URL: http://sports.espn.go.com/video/search?queryString=Highlights"'--!confirmOPENBUGBOUNTY...
espndeportes.espn.go.com XSS vulnerability
Vulnerable URL:...
nba.com XSS vulnerability
Vulnerable URL: http://www.nba.com/blazers/video/search/?ls=channav=%3C/script%3Ev0raz%3Csvg/onload=alert/XSSPosed/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 432 Google...
nba.com XSS vulnerability
Open Bug Bounty ID: OBB-71660 Description| Value ---|--- Affected Website:| nba.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
