NextGEN Gallery 1.9.12 Shell Upload

S21Sec Advisory - Title: NextGEN Gallery 1.9.12 Arbitrary File Upload ID: S21SEC-046-en CVE ID: CVE-2013-3684 Severity: High Status: Fixed History: 27.May.2013 Vulnerability discovered 28.May.2013 Vendor informed 12.Jun.2013 Fix released Authors: Marcos Agüero [email protected] URL:...

WordPress NextGEN Gallery - Arbitrary File Upload

NextGEN Gallery plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...

WordPress Plugin NextGEN Gallery - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in an arbitrary code...

WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload

WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files t...

AVG Official Blog Cross Site Scripting

Title : Cross Site Scripting in AVG Official Blog Author : Ryuzaki Lawlet Blog : justryuz.blogspot.com / www.justryuz.com E-mail : [email protected] / [email protected] / [email protected] Date: 6/5/2013 4.44 pm Vendor: http://wordpress.org/plugins/nextgen-gallery/ Type : Web Apps Vect...

WordPress Plugin NextGEN Gallery - Full Path Disclosure

WordPress Plugin NextGEN Gallery - Full Path Disclosure source: https://www.securityfocus.com/bid/57957/info The NextGEN Gallery plugin for WordPress is prone to a path-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks...

WordPress Plugin NextGEN Gallery - Full Path Disclosure

source: https://www.securityfocus.com/bid/57957/info The NextGEN Gallery plugin for WordPress is prone to a path-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks. NextGEN Gallery versions 1.9.10 and 1.9.11 are vulnerable...

WordPress NextGEN Gallery Plugin - Path Disclosure Vulnerability

This NextGEN Gallery plugin is prone to a path-disclosure vulnerability. It allows anr attacker to obtain sensitive information that may lead to further attacks. Solution Update the plugin...

Wordpress NextGEN Gallery 1.9.10 Arbitrary File Upload Exploit (win)

An attacker can use this C++-Exploitcode to upload some file shellcode for example to compromise the system. This is private exploit. You can buy it at https://0day.today...

WordPress Gallery 3.8.3 Arbitrary File Read

​ Exploit Title : Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/forum/ Software Link : http://wordpress.org/extend/plugins/gallery-plugin/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu ...

WordPress Plugin NextGEN Gallery - 'test-head' Cross-Site Scripting

source: https://www.securityfocus.com/bid/57200/info The NextGEN Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress NextGEN Gallery Plugin - Cross Site Scripting

WordPress NextGEN Gallery plugin's "test-head" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can...

WordPress Plugin NextGEN Gallery - test-head Cross-Site Scripting

WordPress Plugin NextGEN Gallery - test-head Cross-Site Scripting source: https://www.securityfocus.com/bid/57200/info The NextGEN Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

WordPress NextGEN Gallery 1.9.5 Cross Site Scripting

Title: ====== NextGEN Gallery v1.9.5 Wordpress - Web Vulnerabilities Date: ===== 2012-08-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=693 VL-ID: ===== 693 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...

WordPress NextGen Cu3er Gallery Information Disclosure

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

NextGEN Gallery v1.9.5 Wordpress - Web Vulnerabilities

Document Title: =============== NextGEN Gallery v1.9.5 Wordpress - Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=693 Release Date: ============= 2012-08-22 Vulnerability Laboratory ID VL-ID: ==================================== 693...

NextGEN Gallery WordPress Plugin 1.7.3 Path Disclosure

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...

HTB22862: Path disclosure in NextGEN Gallery wordpress plugin

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...

Installation Path Disclosure Weakness in NextGEN Gallery wordpress plugin

High-Tech Bridge SA Security Research Lab has discovered a weakness in NextGEN Gallery wordpress plugin which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in NextGEN Gallery wordpress plugin The weakness exists due to application...

WordPress Plugin NextGEN Smooth Gallery 0.12 - Blind SQL Injection

WordPress NextGEN Smooth Gallery BLIND SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 03 August, 2010 Software Information + Download : http://downloads.wordpress.org/plugin/nextgen-smooth-gallery.1.2.zip + version : 1.2 or lower maybe also...