WordPress Plugin NextGEN Gallery SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in the WordPress plugin NextGEN Gallery. It allows unauthenticated users to obtain...

NextGEN Gallery < 2.1.79 - Unauthenticated SQL Injection

According to the original source, one of the following conditions must be met for exploitation: 1. The use of a NextGEN Basic TagCloud gallery. 2. If users are able to submit posts to be reviewed contributors...

WordPress NextGEN Gallery plugin <= 2.1.59 - Authenticated Remote Code Execution (RCE) Vulnerability

WordPress NextGEN Gallery plugin v2.1.59 is prone to authenticated remote code execution RCE vulnerability. It allows an attacker to change the file name stylesettingsCSSfile value on the /wp-admin/admin.php?page=nggotheroptions page. If an attacker change the file extension to PHP, he can execut...

NextGEN Gallery <= 2.1.56 - Authenticated Local File Inclusion (LFI) & SQLi

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Authenticated Local File Inclusion LFI & SQLi security vulnerability...

BrickDown NextGen - Base64 encoded String, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BrickDown NextGen published at the 'play' market has multiple vulnerabilities...

WordPress NextGEN Gallery 2.0.66.16 Cross Site Scripting

Plugin Name : NextGEN Gallery Effected Version : 2.0.66.16 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept :...

WordPress NextGEN Gallery Plugin <= 2.1.7 - Authenticated Path Traversal

Because of this vulnerability, attackers can access system files and other unauthorized files on the server. Solution Update the plugin...

WordPress NextGEN Gallery plugin 'dir' parameter directory traversal vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.NextGEN Gallery is a WordPress gallery plugin. A directory traversal vulnerability exists in the NextGEN Gallery...

WordPress NextGEN Gallery Directory Read Vulnerability

This module exploits an authenticated directory traversal vulnerability in WordPress Plugin "NextGEN Gallery" version 2.1.7, allowing to read arbitrary directories with the web server privileges. This module requires Metasploit: https://metasploit.com/download Current source:...

NextGen Gallery < 2.1.15 - Path Traversal

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Path Traversal security vulnerability...

WordPress NextGen Cu3er Gallery Plugin - Information Disclosure

This plugin is prone to an Iinformation disclosure vulnerability. Solution Update plugin...

WordPress NextGEN Gallery Plugin <= 1.9.11 - Full Path Disclosure

Because of this vulnerability, attackers can disclose certain system information. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 2.0.63 - Arbitrary File Upload

This plugin is prone to arbitrary file upload vulnerability. Solution Upgrade the plugin...

WordPress NextGen Smooth Gallery Plugin - XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.8.3 - Multiple Vulnerabilities

This plugin is prone to a cross site request forgery and cross site scripting vulnerabilities. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.9.0 - Multiple XSS

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.7.3 - Full Path Disclosure

This plugin is prone to xml/ajax.php full path disclosure vulnerability. Solution Update the plugin...

WordPress NextGEN Gallery Plugin <= 1.9.5 - Stored XSS

This plugin is prone to a cross site scripting vulnerability via gallerypath parameter. Solution Update the plugin...

WordPress NextGen Cu3er Gallery Plugin - Information Disclosure

This plugin is prone to an Iinformation disclosure vulnerability. Solution Update plugin...

WordPress NextGEN Gallery Plugin <= 2.0.0 - Directory Traversal

An unauthenticated POST request to a particular URI with a particular parameter lists the contents of arbitrary directories. Solution Update the plugin...