CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS
References
Link Resource
http://huge-it.com/joomla-portfolio-gallery/ Product URL Repurposed
http://www.securityfocus.com/bid/93821 Third Party Advisory VDB Entry
http://www.vapidlabs.com/advisory.php?v=165 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:huge-it:portfolio_gallery_manager:1.1.0:*:*:*:*:joomla\!:*:*

History

14 Feb 2024, 01:17

Type Values Removed Values Added
References () http://huge-it.com/joomla-portfolio-gallery/ - Product () http://huge-it.com/joomla-portfolio-gallery/ - Product, URL Repurposed

Information

Published : 2016-10-21 14:59

Updated : 2024-02-14 01:17


NVD link : CVE-2016-1000115

Mitre link : CVE-2016-1000115

CVE.ORG link : CVE-2016-1000115


JSON object : View

Products Affected

huge-it

  • portfolio_gallery_manager
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')