566 matches found
WordPress NextGEN Gallery Directory Read Vulnerability
This module exploits an authenticated directory traversal vulnerability in WordPress Plugin "NextGEN Gallery" version 2.1.7, allowing to read arbitrary directories with the web server privileges. This module requires Metasploit: https://metasploit.com/download Current source:...
NextGen Gallery < 2.1.15 - Path Traversal
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Path Traversal security vulnerability...
WordPress NextGEN Gallery Plugin <= 1.9.11 - Full Path Disclosure
Because of this vulnerability, attackers can disclose certain system information. Solution Update the plugin...
WordPress NextGen Cu3er Gallery Plugin - Information Disclosure
This plugin is prone to an Iinformation disclosure vulnerability. Solution Update plugin...
WordPress NextGEN Gallery Plugin <= 1.9.7 - Cross Site Scripting
This plugin is prone to a cross site scripting vulnerability in swfupload.swf . Solution Upgrade the plugin...
WordPress NextGEN Gallery Plugin <= 1.7.3 - Full Path Disclosure
This plugin is prone to xml/ajax.php full path disclosure vulnerability. Solution Update the plugin...
WordPress NextGEN Gallery Plugin <= 1.9.5 - Stored XSS
This plugin is prone to a cross site scripting vulnerability via gallerypath parameter. Solution Update the plugin...
WordPress NextGEN Gallery Plugin <= 1.9.0 - Multiple XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
WordPress NextGen Cu3er Gallery Plugin - Information Disclosure
This plugin is prone to an Iinformation disclosure vulnerability. Solution Update plugin...
WordPress NextGEN Gallery Plugin <= 1.8.3 - Multiple Vulnerabilities
This plugin is prone to a cross site request forgery and cross site scripting vulnerabilities. Solution Update the plugin...
WordPress NextGEN Gallery Plugin <= 2.0.0 - Directory Traversal
An unauthenticated POST request to a particular URI with a particular parameter lists the contents of arbitrary directories. Solution Update the plugin...
WordPress NextGEN Gallery Plugin <= 2.0.63 - Arbitrary File Upload
This plugin is prone to arbitrary file upload vulnerability. Solution Upgrade the plugin...
WordPress NextGen Smooth Gallery Plugin - XSS
Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...
Report Recommends Series of Cybersecurity Changes at FAA
The Federal Aviation Administration needs to upgrade and update its information security capabilities–including building a threat-modeling capability and implementing federal security guidelines–in order to ensure the safety of the nation’s aviation infrastructure, according to a new report by th...
NextGEN Gallery < 2.0.77.3 - CSRF & Arbitrary File Upload
There are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests...
NextGEN Gallery 1.9.5 - gallerypath Parameter Stored XSS
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a gallerypath Parameter Stored XSS security vulnerability...
NextGEN Gallery 1.9.11 - Full Path Disclosure
The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Full Path Disclosure security vulnerability...
WordPress EWWW Image Optimizer 2.0.1 Cross Site Scripting
Advisory ID: HTB23234 Product: EWWW Image Optimizer WordPress plugin Vendor: Shane Bishop Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without technical details Vendor Notification: September 17, 2014 Vendor Patch: September 24, 2014...