Read the docs

Huge-it

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Huge-it records in CISA KEV

No Huge-it vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Catalog 2 records LOW Gallery 2 records MEDIUM Image Gallery 2 records MEDIUM Portfolio Gallery 2 records MEDIUM Portfolio Gallery Manager 2 records LOW Slider 2 records LOW Slideshow 2 records LOW Huge-it Catalog 1 record MEDIUM

Records

17 records

TI-2014-08401 CVE-2014-125101 · GHSA-5w2f-px3r-8vg4

Portfolio Gallery Plugin sql injection

Priority MEDIUM 43

A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00707 Published 2023-05-28 No fix listed CWE-89
TI-2016-09303 CVE-2016-1000118 · GHSA-7rgf-jq37-62rj

XSS & SQLi in HugeIT slideshow v1.0.4

Priority LOW 36

XSS & SQLi in HugeIT slideshow v1.0.4

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02305 Published 2016-10-21 No fix listed CWE-79
TI-2016-09302 CVE-2016-1000117 · GHSA-58vq-q6wx-3f85

XSS & SQLi in HugeIT slideshow v1.0.4

Priority LOW 36

XSS & SQLi in HugeIT slideshow v1.0.4

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02305 Published 2016-10-21 No fix listed CWE-79
TI-2015-01849 CVE-2015-2062 · GHSA-4xwv-qxx8-cggw

Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before…

Priority LOW 36

Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0 for WordPress allow remote administrators to execute arbitrary SQL commands via the removeslide parameter in a popup_posts o…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02446 Published 2020-02-08 No fix listed CWE-89
TI-2014-05969 CVE-2014-7153 · GHSA-x47r-jcgh-vwj4

SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the…

Priority LOW 33

SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the remove…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.02293 Published 2014-09-22 No fix listed CWE-89
TI-2016-09299 CVE-2016-1000114 · GHSA-5687-6cv2-8gg7

XSS in huge IT gallery v1.1.5 for Joomla

Priority LOW 30

XSS in huge IT gallery v1.1.5 for Joomla

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01269 Published 2016-10-06 No fix listed CWE-79
Open these records in search →