CVE-2016-1000117

XSS & SQLi in HugeIT slideshow v1.0.4

• CWE-79
• CWE-89

• http://extensions.joomla.org/extensions/extension/photos-a-images/slideshow/slideshowProduct
• http://www.securityfocus.com/bid/93822Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/advisory.php?v=166Exploit, Third Party Advisory
• http://extensions.joomla.org/extensions/extension/photos-a-images/slideshow/slideshowProduct
• http://www.securityfocus.com/bid/93822Third Party Advisory, VDB Entry
• http://www.vapidlabs.com/advisory.php?v=166Exploit, Third Party Advisory

Published

Oct 21, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1000111Twisted before 16.3.1 does not attempt to address RFC 3875 s…5.3
• CVE-2016-1000112Unauthenticated remote .jpg file upload in contus-video-comm…9.1
• CVE-2016-1000113XSS and SQLi in huge IT gallery v1.1.5 for Joomla9.8
• CVE-2016-1000114XSS in huge IT gallery v1.1.5 for Joomla6.1
• CVE-2016-1000115Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and X…
• CVE-2016-1000116Huge-IT Portfolio Gallery manager v1.1.0 SQL Injection and X…
• CVE-2016-1000118XSS & SQLi in HugeIT slideshow v1.0.4
• CVE-2016-1000119SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
• CVE-2016-1000120SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla
• CVE-2016-1000121XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
• CVE-2016-1000122XSS and SQLi in Huge IT Joomla Slider v1.0.9 extension
• CVE-2016-1000123Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.…