PT-2016-4505 · Huge It · Huge It Gallery

Larry W. Cashdollar

+1

·

CVE-2016-1000113

·

Published

2016-10-06

·

Updated

2019-12-19

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Huge IT Gallery version 1.1.5
Description The issue involves XSS and SQLi in the software, which can lead to security breaches.
Recommendations For version 1.1.5, update to a newer version that contains a fix for this issue, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2016-1000113

Affected Products

Huge It Gallery