Show filters
19 Total Results
Displaying 1-10 of 19
Sort by:
Attacker Value
Unknown
CVE-2017-1002015
Disclosure Date: September 14, 2017 (last updated November 26, 2024)
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via selectMulGallery parameter.
0
Attacker Value
Unknown
CVE-2017-1002012
Disclosure Date: September 14, 2017 (last updated November 26, 2024)
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, In image-gallery-with-slideshow/admin_setting.php the following snippet of code does not sanitize input via the gid variable before passing it into an SQL statement.
0
Attacker Value
Unknown
CVE-2017-1002013
Disclosure Date: September 14, 2017 (last updated November 26, 2024)
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection via imgid parameter in image-gallery-with-slideshow/admin_setting.php.
0
Attacker Value
Unknown
CVE-2017-1002011
Disclosure Date: September 14, 2017 (last updated November 26, 2024)
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, There is a stored XSS vulnerability via the $value->gallery_name and $value->gallery_description where anyone with privileges to modify or add galleries/images and inject javascript into the database.
0
Attacker Value
Unknown
CVE-2017-1002014
Disclosure Date: September 14, 2017 (last updated November 26, 2024)
Vulnerability in wordpress plugin image-gallery-with-slideshow v1.5.2, Blind SQL Injection in image-gallery-with-slideshow/admin_setting.php via gallery_name parameter.
0
Attacker Value
Unknown
CVE-2015-9228
Disclosure Date: September 12, 2017 (last updated November 26, 2024)
In post-new.php in the Photocrati NextGEN Gallery plugin 2.1.10 for WordPress, unrestricted file upload is available via the name parameter, if a file extension is changed from .jpg to .php.
0
Attacker Value
Unknown
CVE-2014-2558
Disclosure Date: May 06, 2014 (last updated October 05, 2023)
The File Gallery plugin before 1.7.9.2 for WordPress does not properly escape strings, which allows remote administrators to execute arbitrary PHP code via a \' (backslash quote) in the setting fields to /wp-admin/options-media.php, related to the create_function function.
0
Attacker Value
Unknown
CVE-2012-1614
Disclosure Date: September 04, 2012 (last updated October 05, 2023)
Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via (1) a direct request to plugins/visiblehookpoints/index.php, an invalid (2) page or (3) cat parameter to thumbnails.php, an invalid (4) page parameter to usermgr.php, or an invalid (5) newer_than or (6) older_than parameter to search.inc.php, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2012-1613
Disclosure Date: September 04, 2012 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in edit_one_pic.php in Coppermine Photo Gallery before 1.5.20 allows remote authenticated users with certain privileges to inject arbitrary web script or HTML via the keywords parameter.
0
Attacker Value
Unknown
CVE-2011-2476
Disclosure Date: June 14, 2011 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667.
0
