CVE-2008-7175

Cross-site scripting XSS vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action...

Cross site scripting

Cross-site scripting XSS vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action...

CVE-2008-7175

Cross-site scripting XSS vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action...

CVE-2008-7175

The CVE refers to a cross-site scripting (XSS) vulnerability in the WordPress NextGEN Gallery plugin (

CVE-2008-7175: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action...

WordPress NextGEN Gallery Plugin <= 0.96 - XSS

Because of this vulnerability in wp-admin/admin.php, the attackers can inject arbitrary web script or HTML via the picture description field in a page edit action. Solution Update the plugin...

nextgen-xss.txt

============================== XSS - Nextgen gallery 0.96 wordpress plugin ============================== Author: Eduardo Neves a.k.a eth0 Date: 07 june 2008 Site: webappsecurity.wordpress.com ————————————— APPLICATION : Nextgen gallery VERSION : alert'xss'; And when the gallery was posted, user...

XSS - NEXTGEN GALLERY 0.96 WORDPRESS PLUGIN

============================== XSS - Nextgen gallery 0.96 wordpress plugin ============================== Author: Eduardo Neves a.k.a eth0 Date: 07 june 2008 Site: webappsecurity.wordpress.com ————————————— APPLICATION : Nextgen gallery VERSION : = 0.96 VENDOR :...

CVE-2006-0086

Technical details about CVE-2006-0086 are not provided in the supplied documents; no product/version specifics, exploit information, or remediation are included. Monitor for updates.