CVE-2020-11679

Castel NextGen DVR v1.0.0 is vulnerable to privilege escalation through the Adminstrator/Users/Edit/:UserId functionality. Adminstrator/Users/Edit/:UserId fails to check that the request was submitted by an Administrator. This allows a normal user to escalate their privileges by adding additional...

CVE-2013-3684

NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload...

Design/Logic Flaw

NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload...

CVE-2013-3684

The CVE-2013-3684 entry concerns the NextGEN Gallery WordPress plugin (pre-1.9.13) and a vulnerability in ngggallery.php that allows arbitrary file upload. Multiple connected sources confirm affected version (1.9.12 and earlier) and that unauthenticated uploads were possible, potentially enabling...

CVE-2013-3684

NextGEN Gallery plugin before 1.9.13 for WordPress: ngggallery.php file upload...

Exploit for SQL Injection in Imagely Nextgen_Gallery

CVE-2019-14314 CVE-2019-14314 - NextGEN Gallery 3.2.10 Authent...

CVE-2013-0291

NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability...

CVE-2013-0291

CVE-2013-0291 concerns the WordPress plugin NextGEN Gallery (versions 1.9.10 and 1.9.11). Multiple connected sources confirm a Path Disclosure vulnerability , i.e., exposure of sensitive server paths through the plugin. OpenVAS lists the affected scope as WordPress NextGEN Gallery Plugin 1.9.10

CVE-2013-0291

NextGEN Gallery Plugin for WordPress 1.9.10 and 1.9.11 has a Path Disclosure Vulnerability...

WordPress NextGEN Gallery Path Traversal Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.NextGEN Gallery is an image gallery plugin used in it. A path traversal vulnerability exists in path selection in WordPress NextGEN...

WordPress NextGEN Gallery Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.NextGEN Gallery is an image gallery plugin used in it. A cross-site scripting vulnerability exists in WordPress NextGEN Gallery. The...

CVE-2015-9538

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection...

CVE-2015-9537

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnailwidth, thumbnailheight, thumbwidth, thumbheight, wmXpos, and wmYpos, and template...

Cross site scripting

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnailwidth, thumbnailheight, thumbwidth, thumbheight, wmXpos, and wmYpos, and template...

Directory traversal

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection...

CVE-2015-9537

The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnailwidth, thumbnailheight, thumbwidth, thumbheight, wmXpos, and wmYpos, and template...

CVE-2015-9537

The CVE-2015-9537 entry concerns the WordPress NextGEN Gallery plugin prior to version 2.1.10, which contains multiple XSS vulnerabilities. The affected component is the NextGEN Gallery WordPress plugin; the root cause is insufficient sanitization/validation of user-supplied input in several fiel...

CVE-2015-9538

The CVE-2015-9538 entry applies to the WordPress NextGEN Gallery plugin prior to version 2.1.15. The flaw is a directory traversal vulnerability in path selection ("../"), caused by insufficient filtering of path components, which could allow access to locations outside a restricted directory. Af...

CVE-2015-9538

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection...

NextGEN Gallery Plugin for WordPress < 3.2.11 SQL Injection

The WordPress NextGEN Gallery Plugin installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input. A remote attacker can exploit this issue to manipulate SQL queries, resulting in the disclosure of sensitive information and...