CVE-2016-1000116

High

Published: 21/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Version 1.1.0 of the Huge-IT Portfolio Gallery manager has SQL Injection and XSS vulnerabilities that can be exploited by malicious users.

Risk Assessment

Exploitation of these vulnerabilities may lead to unauthorized access to data and execution of malicious code in the user's browser context.

Recommendation

It is recommended to update the Huge-IT Portfolio Gallery manager to the latest version to eliminate these vulnerabilities and conduct a security audit of the application.

Other vulnerabilities in Huge-IT Portfolio Gallery manager v1.1.0

CVE-2016-1000115High
Version 1.1.0 of the Huge-IT Portfolio Gallery manager is vulnerable to SQL Injection and XSS attacks. These vulnerabilities may allow attackers to execute unauthorized database queries and inject malicious JavaScript code.

Original NVD description (English source)

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS