WordPress NextGEN Gallery 'jqueryFileTree.php' Directory Traversal Vulnerability

WordPress NextGEN Gallery Plugin is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress NextGEN Gallery目录遍历漏洞

WordPress是一款内容管理系统。 WordPress NextGEN Gallery存在目录遍历漏洞，由于未验证POST请求带有特定参数的特定URI可以列出任意目录的内容。 0 NextGEN Gallery 2.0.0 厂商补丁： WordPress ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://wordpress.org/plugins/nextgen-gallery/ curl -i -d 'dir=/etc/'...

WordPress Plugin NextGEN Gallery - jqueryFileTree.php Directory Traversal

WordPress Plugin NextGEN Gallery - jqueryFileTree.php Directory Traversal source: https://www.securityfocus.com/bid/65637/info The NextGEN Gallery plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this...

NextGEN Gallery 2.0.0 Directory Traversal

https://security.dxw.com/advisories/directory-traversal-in-nextgen-gallery-2-0-0/ Details ================ Software: NextGEN Gallery Version: 2.0.0 Homepage: http://wordpress.org/plugins/nextgen-gallery/ CVSS: 5 Medium; AV:N/AC:L/Au:N/C:P/I:N/A:N Description ================ Directory traversal i...

WordPress NextGEN Gallery Plugin - Directory Traversal

This NextGEN Gallery plugin is prone to a directory-traversal vulnerability via "jqueryFileTree.php". It fails to clean up user-supplied input. Using this plugin an attacker can obtain important information which could aid in further attacks. Solution Upgrade the plugin...

WordPress Plugin NextGEN Gallery - 'jqueryFileTree.php' Directory Traversal

source: https://www.securityfocus.com/bid/65637/info The NextGEN Gallery plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid i...

WordPress DT Chocolate Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress DT Chocolate jplayer.swf Cross Site Scripting vulnerability + Date: 13-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress Theme DT...

WordPress NextGen Gallery Cross Site Scripting

Author: TUNISIAN CYBER + Exploit Title: WordPress NextGen swfupload.swf Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Wordpress PlugIn NextGen...

WordPress NextGen Gallery跨站脚本漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: WordPress NextGen swfupload.swf Cross Site Scripting vulnerability + Date: 09-01-2014 + Category: WebApp + Google Dork: :inurl:"/wp-content/plugins/nextgen-gallery/" + Tested on: KaliLinux + Friend's blog: www.na3il.com...

Design/Logic Flaw

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...

CVE-2013-6180

EMC RSA Security Analytics SA 10.x before 10.3, and RSA NetWitness NextGen 9.8, does not ensure that SA Core requests originate from the SA REST UI, which allows remote attackers to bypass intended access restrictions by sending a Core request from a web browser or other unintended user agent...

WordPress NextGen Smooth Gallery Cross Site Scripting

Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress nextgen-smooth-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected] Home : http://iedb.ir - http://iedb.ir/acc Software Link :...

NextGEN Gallery 1.9.12 Shell Upload

S21Sec Advisory - Title: NextGEN Gallery 1.9.12 Arbitrary File Upload ID: S21SEC-046-en CVE ID: CVE-2013-3684 Severity: High Status: Fixed History: 27.May.2013 Vulnerability discovered 28.May.2013 Vendor informed 12.Jun.2013 Fix released Authors: Marcos Agüero [email protected] URL:...

WordPress NextGEN Gallery - Arbitrary File Upload

NextGEN Gallery plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...

WordPress Plugin NextGEN Gallery - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in an arbitrary code...

WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload

WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files t...

AVG Official Blog Cross Site Scripting

Title : Cross Site Scripting in AVG Official Blog Author : Ryuzaki Lawlet Blog : justryuz.blogspot.com / www.justryuz.com E-mail : [email protected] / [email protected] / [email protected] Date: 6/5/2013 4.44 pm Vendor: http://wordpress.org/plugins/nextgen-gallery/ Type : Web Apps Vect...

WordPress Plugin NextGEN Gallery - Full Path Disclosure

WordPress Plugin NextGEN Gallery - Full Path Disclosure source: https://www.securityfocus.com/bid/57957/info The NextGEN Gallery plugin for WordPress is prone to a path-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks...

WordPress Plugin NextGEN Gallery - Full Path Disclosure

source: https://www.securityfocus.com/bid/57957/info The NextGEN Gallery plugin for WordPress is prone to a path-disclosure vulnerability. An attacker can exploit this issue to obtain sensitive information that may lead to further attacks. NextGEN Gallery versions 1.9.10 and 1.9.11 are vulnerable...

WordPress NextGEN Gallery Plugin - Path Disclosure Vulnerability

This NextGEN Gallery plugin is prone to a path-disclosure vulnerability. It allows anr attacker to obtain sensitive information that may lead to further attacks. Solution Update the plugin...