CVE-2016-1000115

Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and XSS

• CWE-79
• CWE-89

• http://huge-it.com/joomla-portfolio-gallery/Product, URL Repurposed
• http://www.securityfocus.com/bid/93821Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/advisory.php?v=165Exploit, Third Party Advisory
• http://huge-it.com/joomla-portfolio-gallery/Product, URL Repurposed
• http://www.securityfocus.com/bid/93821Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/advisory.php?v=165Exploit, Third Party Advisory

Published

Oct 21, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1000109HHVM does not attempt to address RFC 3875 section 4.1.18 nam…5.3
• CVE-2016-1000110The CGIHandler class in Python before 2.7.12 does not protec…6.1
• CVE-2016-1000111Twisted before 16.3.1 does not attempt to address RFC 3875 s…5.3
• CVE-2016-1000112Unauthenticated remote .jpg file upload in contus-video-comm…9.1
• CVE-2016-1000113XSS and SQLi in huge IT gallery v1.1.5 for Joomla9.8
• CVE-2016-1000114XSS in huge IT gallery v1.1.5 for Joomla6.1
• CVE-2016-1000116Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and X…
• CVE-2016-1000117XSS & SQLi in HugeIT slideshow v1.0.4
• CVE-2016-1000118XSS & SQLi in HugeIT slideshow v1.0.4
• CVE-2016-1000119SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
• CVE-2016-1000120SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
• CVE-2016-1000121XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension