CVE Catalog

CVE-2016-1000118

High
Published: Translated: NVD NIST

Summary

XSS and SQL Injection vulnerabilities have been identified in HugeIT slideshow version 1.0.4, which can be exploited by attackers to inject malicious code and manipulate database data.

Risk Assessment

Exploitation of these vulnerabilities may lead to user data theft and system compromise, posing a serious threat to the organization's security.

Recommendation

It is recommended to update HugeIT slideshow to the latest version to eliminate these vulnerabilities and conduct a security audit of the application.

Other vulnerabilities in HugeIT slideshow v1.0.4

Original NVD description (English source)

XSS & SQLi in HugeIT slideshow v1.0.4

Vulnerability data from NVD (NIST) · CISA KEV · EPSS