Wordpress Plugin NextGEN Gallery <= 1.5.1 - XSS Vulnerability

No description provided by source. XSS Vulnerability in NextGEN Gallery Wordpress Plugin 1. Advisory Information Title: XSS Vulnerability in NextGEN Gallery Wordpress Plugin Advisory Id: CORE-2010-0323 Advisory URL: http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability Date...

WordPress NextGEN Smooth Gallery 0.12 - Blind SQL Injection Vulnerability

No description provided by source. WordPress NextGEN Smooth Gallery BLIND SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 03 August, 2010 Software Information + Download : http://downloads.wordpress.org/plugin/nextgen-smooth-gallery.1.2.zip +...

WordPress NextGEN Gallery Plugin 1.9.1 - Arbitrary File Upload

NextGEN Gallery plugin's "photocratiajax" parameter is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...

WordPress Plugin NextGEN Gallery 1.9.1 - 'photocrati_ajax' Arbitrary File Upload

source: https://www.securityfocus.com/bid/68414/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in an arbitrary code...

WordPress Plugin NextGEN Gallery 1.9.1 - photocrati_ajax Arbitrary File Upload

WordPress Plugin NextGEN Gallery 1.9.1 - photocratiajax Arbitrary File Upload source: https://www.securityfocus.com/bid/68414/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitra...

CVE-2014-3123

Cross-site scripting XSS vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gallery permission to inject arbitrary web script or...

CVE-2014-3123: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gallery permission to inject arbitrary web script or...

WordPress NextGEN Gallery 'jqueryFileTree.php' Directory Traversal Vulnerability

WordPress NextGEN Gallery Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress NextGEN Gallery目录遍历漏洞

WordPress是一款内容管理系统。 WordPress NextGEN Gallery存在目录遍历漏洞，由于未验证POST请求带有特定参数的特定URI可以列出任意目录的内容。 0 NextGEN Gallery 2.0.0 厂商补丁： WordPress ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://wordpress.org/plugins/nextgen-gallery/ curl -i -d 'dir=/etc/'...

WordPress Plugin NextGEN Gallery - jqueryFileTree.php Directory Traversal

WordPress Plugin NextGEN Gallery - jqueryFileTree.php Directory Traversal source: https://www.securityfocus.com/bid/65637/info The NextGEN Gallery plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this...

WordPress NextGEN Gallery Plugin - Directory Traversal

This NextGEN Gallery plugin is prone to a directory-traversal vulnerability via "jqueryFileTree.php". It fails to clean up user-supplied input. Using this plugin an attacker can obtain important information which could aid in further attacks. Solution Upgrade the plugin...

NextGEN Gallery 2.0.0 Directory Traversal

https://security.dxw.com/advisories/directory-traversal-in-nextgen-gallery-2-0-0/ Details ================ Software: NextGEN Gallery Version: 2.0.0 Homepage: http://wordpress.org/plugins/nextgen-gallery/ CVSS: 5 Medium; AV:N/AC:L/Au:N/C:P/I:N/A:N Description ================ Directory traversal i...

WordPress Plugin NextGEN Gallery - 'jqueryFileTree.php' Directory Traversal

source: https://www.securityfocus.com/bid/65637/info The NextGEN Gallery plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid i...

WordPress DT Chocolate Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress DT Chocolate jplayer.swf Cross Site Scripting vulnerability + Date: 13-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress Theme DT...

WordPress NextGen Gallery Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress NextGen swfupload.swf Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress PlugIn NextGen...

WordPress NextGen Gallery跨站脚本漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: WordPress NextGen swfupload.swf Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com...

Design/Logic Flaw

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...

CVE-2013-6180

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...

CVE-2013-6180: Undefined Security Weakness

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...

WordPress NextGen Smooth Gallery Cross Site Scripting

Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress nextgen-smooth-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected] Home : http://iedb.ir - http://iedb.ir/acc Software Link :...