First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2016-1000115

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

Metrics

CVSS 3.0 7.2/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://huge-it.com/joomla-portfolio-gallery/Product, URL Repurposed
http://www.securityfocus.com/bid/93821Third Party Advisory, VDB Entry
http://www.vapidlabs.com/advisory.php?v=165Exploit, Third Party Advisory
http://huge-it.com/joomla-portfolio-gallery/Product, URL Repurposed
http://www.securityfocus.com/bid/93821Third Party Advisory, VDB Entry
http://www.vapidlabs.com/advisory.php?v=165Exploit, Third Party Advisory

Timeline

Published: Oct 21, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-10001167.2Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS CVE-2016-10001177.2XSS & SQLi in HugeIT slideshow v1.0.4 CVE-2016-10001187.2XSS & SQLi in HugeIT slideshow v1.0.4 CVE-2016-10001197.2SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla CVE-2016-10001207.2SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla CVE-2016-10001214.8XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension CVE-2016-10001227.2XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension CVE-2016-10001239.8Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla CVE-2016-10001249.8Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6 CVE-2016-10001259.8Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla CVE-2016-10001266.1Reflected XSS in wordpress plugin admin-font-editor v1.8 CVE-2016-10001276.1Reflected XSS in wordpress plugin ajax-random-post v2.00