566 matches found
CVE-2018-1000172
Imagely NextGEN Gallery version 2.2.30 and earlier contains a Cross Site Scripting XSS vulnerability in Image Alt & Title Text. This attack appears to be exploitable via a victim viewing the image in the administrator page. This vulnerability appears to have been fixed in 2.2.45...
CVE-2018-1000172
Imagely NextGEN Gallery (WordPress plugin) ≤ 2.2.44 contains a Cross-Site Scripting (XSS) in Image Alt & Title Text. The issue could be triggered when a user views an image on an administrator page, with the root cause stemming from improper validation of user-submitted data in the alt/title attr...
WordPress nextgen-gallery plugin information disclosure vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports PHP and MySQL server set up a personal blog site . nextgen-gallery plugin is used in one of the image management plugin . A security vulnerability exists in WordPress...
NextGEN Gallery <= 2.2.46 - Galley Paths Not Secured
The changelog states: "Secured: Gallery paths and the ability to manage tags Kudos: ElevenPaths Telefonica cibersecurity Unit"...
WordPress NextGEN Gallery plugin <=2.2.46 - Gallery Paths Not Secured
Telefonica Cybersecurity Unit found an issue with insecure paths in WordPress NextGEN Gallery plugin versions =2.2.46. Solution Update the WordPress NextGEN Gallery plugin to the latest available version at least 2.2.50...
Design/Logic Flaw
In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured...
CVE-2018-7586
In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured...
CVE-2018-7586
In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured...
CVE-2018-7586
CVE-2018-7586 affects the WordPress plugin NextGEN Gallery (versions before 2.2.50). The issue is described as gallery paths that are not secured, leading to exposure of gallery path information. According to connected sources, this vulnerability exists in the plugin prior to 2.2.50 and has a pot...
NextGEN Gallery <= 2.2.44 - Cross-Site Scripting (XSS)
XSS in error message caused by alt and title image attributes...
Joomla NextGen Editor 2.1.0 Component - plname SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: Joomla! Component NextGen Editor 2.1.0 - SQL Injection Dork: N/A Date: 19.12.2017 Vendor Homepage: hhttp://nextgeneditor.com/ Software Link: https://extensions.joomla.org/extension/nextgen-editor/ Software Download:...
Joomla! Component NextGen Editor 2.1.0 - plname SQL Injection
Joomla! Component NextGen Editor 2.1.0 - plname SQL Injection Exploit Title: Joomla! Component NextGen Editor 2.1.0 - SQL Injection Dork: N/A Date: 19.12.2017 Vendor Homepage: hhttp://nextgeneditor.com/ Software Link: https://extensions.joomla.org/extension/nextgen-editor/ Software Download:...
Joomla! NextGen Editor 2.1.0 SQL Injection
Exploit Title: Joomla! Component NextGen Editor 2.1.0 - SQL Injection Dork: N/A Date: 19.12.2017 Vendor Homepage: hhttp://nextgeneditor.com/ Software Link: https://extensions.joomla.org/extension/nextgen-editor/ Software Download:...
Joomla! Component NextGen Editor 2.1.0 - 'plname' SQL Injection
Exploit Title: Joomla! Component NextGen Editor 2.1.0 - SQL Injection Dork: N/A Date: 19.12.2017 Vendor Homepage: hhttp://nextgeneditor.com/ Software Link: https://extensions.joomla.org/extension/nextgen-editor/ Software Download:...
WordPress Photocrati NextGEN Gallery Plugin File Upload Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Photocrati NextGEN Gallery plugin is one of the image management plugin. A security vulnerability exists in the...
WordPress Photocrati NextGEN Gallery Plugin Cross-Site Scripting Vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites set up on PHP and MySQL servers.Photocrati NextGEN Gallery plugin is one of the image management plugin. A cross-site scripting vulnerability exist...
WordPress NextGEN Gallery Plugin < 2.1.15 Malicious File Upload Vulnerability
The WordPress plugin Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
Information disclosure
In the nggallery-manage-gallery page in the Photocrati NextGEN Gallery plugin 2.1.15 for WordPress, XSS is possible for remote authenticated administrators via the images1alttext parameter...
