VYPR
← All vendors
Vendor

Huge It

Products
12
CVEs
18
Across products
25
Status
Private

Products

12

Recent CVEs

18
  • CVE-2016-1000125CriOct 6, 2016
    Huge It
    Catalog
    risk 0.67cvss 9.8epss 0.03

    Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

  • CVE-2016-1000124CriOct 6, 2016
    Huge It
    Portfolio Gallery Manager
    risk 0.67cvss 9.8epss 0.03

    Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6

  • CVE-2016-1000123CriOct 6, 2016
    Huge It
    Video Gallery
    risk 0.67cvss 9.8epss 0.04

    Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla

  • CVE-2016-11018CriJan 21, 2020
    WordPress
    gallery-images
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered in the Huge-IT gallery-images plugin before 1.9.0 for WordPress. The headers Client-Ip and X-Forwarded-For are prone to unauthenticated SQL injection. The affected file is gallery-images.php. The affected function is huge_it_image_gallery_ajax_callback().

  • CVE-2016-1000113CriOct 6, 2016
    Huge It
    Gallery
    risk 0.64cvss 9.8epss 0.03

    XSS and SQLi in huge IT gallery v1.1.5 for Joomla

  • CVE-2015-2062HigFeb 8, 2020
    WordPress
    Huge-IT Slider
    risk 0.47cvss 7.2epss 0.02

    Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0 for WordPress allow remote administrators to execute arbitrary SQL commands via the removeslide parameter in a popup_posts or edit_cat action in the sliders_huge_it_slider page to…

  • CVE-2016-1000122HigOct 27, 2016
    Huge It
    Slider
    risk 0.47cvss 7.2epss 0.02

    XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension

  • CVE-2016-1000120HigOct 27, 2016
    Huge It
    Catalog
    risk 0.47cvss 7.2epss 0.02

    SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

  • CVE-2016-1000119HigOct 21, 2016
    Huge It
    Catalog
    risk 0.47cvss 7.2epss 0.02

    SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla

  • CVE-2016-1000118HigOct 21, 2016
    Huge It
    Slideshow
    risk 0.47cvss 7.2epss 0.02

    XSS & SQLi in HugeIT slideshow v1.0.4

  • CVE-2016-1000117HigOct 21, 2016
    Huge It
    Slideshow
    risk 0.47cvss 7.2epss 0.02

    XSS & SQLi in HugeIT slideshow v1.0.4

  • CVE-2016-1000116HigOct 21, 2016
    Huge It
    Portfolio Gallery Manager
    risk 0.47cvss 7.2epss 0.02

    Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

  • CVE-2016-1000115HigOct 21, 2016
    Huge It
    Portfolio Gallery Manager
    risk 0.47cvss 7.2epss 0.03

    Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

  • CVE-2016-1000114MedOct 6, 2016
    Huge It
    Gallery
    risk 0.40cvss 6.1epss 0.01

    XSS in huge IT gallery v1.1.5 for Joomla

  • CVE-2014-125101MedMay 28, 2023
    WordPress
    Portfolio Gallery – Image Gallery Plugin
    risk 0.34cvss 6.3epss 0.01

    A vulnerability classified as critical has been found in Portfolio Gallery Plugin up to 1.1.8 on WordPress. This affects an unknown part. The manipulation leads to sql injection. It is possible to initiate the attack remotely. Upgrading to version 1.1.9 is able to address this…

  • CVE-2016-1000121MedOct 27, 2016
    Huge It
    Slider
    risk 0.31cvss 4.8epss 0.01

    XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension

  • CVE-2014-7153Sep 22, 2014
    WordPress
    Huge-IT Image Gallery
    risk 0.03cvss —epss 0.02

    SQL injection vulnerability in the editgallery function in admin/gallery_func.php in the Huge-IT Image Gallery plugin 1.0.1 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the removeslide parameter to wp-admin/admin.php.

  • CVE-2002-1732Dec 31, 2002
    Actinic
    Actinic Catalog
    risk 0.00cvss —epss 0.01

    Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or…