CVE-2022-42485

CVE-2022-42485 affects the WordPress Gallery with thumbnail slider plugin versions prior to 6.0. The vulnerability is an Auth. (contributor+) stored Cross-Site Scripting (XSS) flaw in the plugin’s handling, enabling XSS by users with contributor or higher permissions. Affected component: Galaxy W...

CVE-2022-42485 WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

CVE-2022-42485 WordPress Gallery with thumbnail slider Plugin <= 6.0 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Cross-Site Scripting XSS vulnerability in Galaxy Weblinks Gallery with thumbnail slider plugin = 6.0 versions...

PT-2023-14123 · Unknown · Galaxy Weblinks Gallery With Thumbnail Slider Plugin

Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks Gallery with thumbnail slider plugin versions prior to 6.0 Description: A Cross-Site Scripting XSS issue affects the Galaxy Weblinks Gallery with thumbnail slider plugin, allowing unauthorized access for users with contributor...

WordPress Plugin Galaxy Weblinks Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Joomla WebLinks 3.6.0 Database Disclosure / SQL Injection

Exploit Title : Joomla WebLinks 3.6.0 SQL Injection / Database Disclosure Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 10/02/2019 Vendor Homepage : joomla.org Software Download Link :...

CVE-2014-7981

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/joomlaweblinkssqli.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

sajkorala.in XSS vulnerability

Vulnerable URL: http://www.sajkorala.in/weblinks/gotolink.php?query=%22/%3E%3Cscript%3Ealert/OPENBUGBOUNTY/;%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.12.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / N...

CVE-2014-8593

Multiple cross-site scripting XSS vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 default URI to admin.php or the 2 id parameter to admin.php or 3 go.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 default URI to admin.php or the 2 id parameter to admin.php or 3 go.php...

CVE-2014-8593

Allomani Weblinks 1.0 has multiple XSS vulnerabilities described in CVE-2014-8593, allowing remote attackers to inject arbitrary web script or HTML via (1) the default URI to admin.php, (2) the id parameter to admin.php, or (3) go.php. The NVD entry lists these via the vulnerability description; ...

CVE-2014-8593

Multiple cross-site scripting XSS vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 default URI to admin.php or the 2 id parameter to admin.php or 3 go.php...

CVE-2014-8766

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in a browse action to index.php or 2 unspecified parameters to admin.php...

Sql injection

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in a browse action to index.php or 2 unspecified parameters to admin.php...

CVE-2014-8766

CVE-2014-8766 involves multiple SQL injection vulnerabilities in Allomani Weblinks 1.0. The affected component is the Weblinks application (index.php browse action and admin.php) where attacker-supplied input in the cat parameter (in browse) or other unspecified parameters (in admin) can lead to ...

CVE-2014-8766

Multiple SQL injection vulnerabilities in Allomani Weblinks 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 cat parameter in a browse action to index.php or 2 unspecified parameters to admin.php...

Allomani Weblinks 1.0 Cross Site Scripting / SQL Injection

Allomani Weblinks v1.0 Multi Vulnerability ===================================== Author : indoushka Vondor : http://www.allomani.com/ Dork : جميع الحقوق محفوظة لـ : اللوماني © 2014 برمجة اللوماني للخدمات البرمجية © 2006 ====================================== Sql injection :...

Mambo <= 4.6rc1 (Weblinks) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n; echo disclosure exploit benchmark vesion\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n; echo this is calle...

Joomla <= 1.0.9 (Weblinks) Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on 126 $result.=" ."; else $result.=" ".$st...

Mambo <= 4.6rc1 (Weblinks) Remote Blind SQL Injection Exploit (2)

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Mambo = 4.6rc1 'Weblinks' blind SQL injection / admin credentials\r\n; echo disclosure exploit ii quicker and more effective version, but it floods\r\n; echo admin of links submissions...\r\n; echo by rgod...