696 matches found
CVE-2015-9537: Improper Neutralization of Input During Web Page Generation
The NextGEN Gallery plugin before 2.1.10 for WordPress has multiple XSS issues involving thumbnailwidth, thumbnailheight, thumbwidth, thumbheight, wmXpos, and wmYpos, and template...
CVE-2015-9538: Improper Limitation of a Pathname to a Restricted Directory
The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection...
NextGEN Gallery Plugin for WordPress < 3.2.11 SQL Injection
The WordPress NextGEN Gallery Plugin installed on the remote host is affected by a SQL injection vulnerability due to improper sanitization of user-supplied input. A remote attacker can exploit this issue to manipulate SQL queries, resulting in the disclosure of sensitive information and...
WordPress Imagely NextGEN Gallery Plugin SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Imagely NextGEN Gallery is an image gallery plugin used in it. A SQL injection vulnerability exists in WordPress Imagely NextGEN Galler...
CVE-2019-14314
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...
CVE-2019-14314
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...
Sql injection
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...
CVE-2019-14314
The CVE-2019-14314 issue affects the Imagely NextGEN Gallery WordPress plugin prior to 3.2.11. The root cause is a SQL injection in modules/nextgen_gallery_display/package.module.nextgen_gallery_display.php, allowing a remote attacker to execute arbitrary SQL commands and potentially compromise d...
CVE-2019-14314
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...
CVE-2019-14314: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...
PT-2019-13602
Name of the Vulnerable Software and Affected Versions Imagely NextGEN Gallery plugin versions prior to 3.2.11 Description A SQL injection issue exists, allowing a remote attacker to execute arbitrary SQL commands on the affected system via the modules/nextgen gallery display/package.module.nextge...
WordPress Nextgen Gallery plugin <= 3.2.8 - SQL Injection vulnerability
SQL Injection vulnerability found by Tin Duong Fortinet FortiGuard Labs in WordPress Nextgen Gallery plugin versions = 3.2.8. Solution Update the WordPress Nextgen Gallery plugin to the latest available version at least 3.2.10...
CVE-2019-14314
A SQL injection vulnerability exists in the Imagely NextGEN Gallery plugin before 3.2.11 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system via...
CVE-2016-10889
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name...
CVE-2016-10889
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name...
CVE-2016-10889
The CVE-2016-10889 vulnerability affects the WordPress NextGEN Gallery plugin prior to version 2.1.57. The issue is an SQL injection via a gallery name, as documented by Red Hat and NVD references. Impact is described as high in CVSS v3 (CRITICAL, with HIGH confidentiality, integrity, and availab...
PT-2019-7685
Name of the Vulnerable Software and Affected Versions nextgen-gallery plugin versions prior to 2.1.57 Description The issue is related to SQL injection, which can occur via a gallery name. Recommendations For versions prior to 2.1.57, update to version 2.1.57 or later to resolve the issue...
CVE-2016-10889: Improper Neutralization of Special Elements used in an SQL Command
The nextgen-gallery plugin before 2.1.57 for WordPress has SQL injection via a gallery name...
WordPress NextGEN Gallery plugin <= 3.1.6 - Authenticated Option Update vulnerability (Fremius Library security issue)
Authenticated Option Update vulnerability Fremius Library security issue found in WordPress NextGEN Gallery plugin versions = 3.1.6. Solution Update the WordPress NextGEN Gallery plugin to the latest available version at least 3.1.7...
