WordPress NextGEN Gallery Plugin <= 2.0.0 - Directory Traversal

An unauthenticated POST request to a particular URI with a particular parameter lists the contents of arbitrary directories. Solution Update the plugin...

Report Recommends Series of Cybersecurity Changes at FAA

The Federal Aviation Administration needs to upgrade and update its information security capabilities–including building a threat-modeling capability and implementing federal security guidelines–in order to ensure the safety of the nation’s aviation infrastructure, according to a new report by th...

NextGEN Gallery < 2.0.77.3 - CSRF & Arbitrary File Upload

There are two vulnerabilities which can allow an attacker to gain full access over the web application. The vulnerabilities lie in how the application validates user uploaded files and lack of security measures preventing unwanted HTTP requests...

NextGEN Gallery 1.9.11 - Full Path Disclosure

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Full Path Disclosure security vulnerability...

NextGEN Gallery 1.9.5 - gallerypath Parameter Stored XSS

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a gallerypath Parameter Stored XSS security vulnerability...

WordPress EWWW Image Optimizer 2.0.1 Cross Site Scripting

Advisory ID: HTB23234 Product: EWWW Image Optimizer WordPress plugin Vendor: Shane Bishop Vulnerable Versions: 2.0.1 and probably prior Tested Version: 2.0.1 Advisory Publication: September 17, 2014 without technical details Vendor Notification: September 17, 2014 Vendor Patch: September 24, 2014...

NextGEN Gallery <= 1.7.3 - xml/ajax.php Path Disclosure

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a xml/ajax.php Path Disclosure security vulnerability...

NextGEN Gallery 1.9.12 - Arbitrary File Upload

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

NextGen Smooth Gallery - XSS

The nextgen-smooth-gallery WordPress plugin was affected by a XSS security vulnerability...

NextGEN Smooth Gallery - Blind SQL Injection

The nextgen-smooth-gallery WordPress plugin was affected by a Blind SQL Injection security vulnerability...

NextGEN Gallery 2.0.0 - Directory Traversal

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Directory Traversal security vulnerability...

NextGEN Gallery <= 1.5.1 - Cross-Site Scripting (XSS)

The WordPress Gallery Plugin – NextGEN Gallery WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress NextGEN Gallery 2.0.63 Shell Upload Vulnerability

WordPress NextGEN Gallery plugin version 2.0.63 suffers from a remote shell upload vulnerability. Exploit Title: Wordpress NextGEN Gallery Plugin 2.0.63 Arbitrary File Upload Author: SANTHO @s4n7h0 Vendor Homepage: http://wordpress.org/plugins/nextgen-gallery/ Category: WebApp / CMS / Wordpress...

WordPress NextGEN Gallery 2.0.63 Shell Upload

Exploit Title: Wordpress NextGEN Gallery Plugin 2.0.63 Arbitrary File Upload Author: SANTHO @s4n7h0 Vendor Homepage: http://wordpress.org/plugins/nextgen-gallery/ Category: WebApp / CMS / Wordpress Version: 2.0.63 and less --------------------------------------------------- Vulnerability Tracking...

Wordpress Plugin NextGEN Gallery <= 1.5.1 - XSS Vulnerability

No description provided by source. XSS Vulnerability in NextGEN Gallery Wordpress Plugin 1. Advisory Information Title: XSS Vulnerability in NextGEN Gallery Wordpress Plugin Advisory Id: CORE-2010-0323 Advisory URL: http://www.coresecurity.com/content/nextgen-gallery-xss-vulnerability Date...

WordPress NextGEN Smooth Gallery 0.12 - Blind SQL Injection Vulnerability

No description provided by source. WordPress NextGEN Smooth Gallery BLIND SQL injection Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : 03 August, 2010 Software Information + Download : http://downloads.wordpress.org/plugin/nextgen-smooth-gallery.1.2.zip +...

WordPress NextGEN Gallery Plugin 1.9.1 - Arbitrary File Upload

NextGEN Gallery plugin's "photocratiajax" parameter is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...

WordPress Plugin NextGEN Gallery 1.9.1 - 'photocrati_ajax' Arbitrary File Upload

source: https://www.securityfocus.com/bid/68414/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in an arbitrary code...

WordPress Plugin NextGEN Gallery 1.9.1 - photocrati_ajax Arbitrary File Upload

WordPress Plugin NextGEN Gallery 1.9.1 - photocratiajax Arbitrary File Upload source: https://www.securityfocus.com/bid/68414/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitra...

CVE-2014-3123

Cross-site scripting XSS vulnerability in admin/manage-images.php in the NextCellent Gallery plugin before 1.19.18 for WordPress allows remote authenticated users with the NextGEN Upload images, NextGEN Manage gallery, or NextGEN Manage others gallery permission to inject arbitrary web script or...