WordPress UnGallery plugin <= 1.5.8 - Local File Disclosure

This vulnerability allows an attacker to obtain important information from local files on computers running the vulnerable application. Other attacks are also possible. Solution Update the plugin...

WordPress Plugin UnGallery 1.5.8 - Local File Disclosure

Exploit Title: WordPress UnGallery plugin = 1.5.8 Local File Disclosure Vulnerability Date: 2011-08-20 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/ungallery.1.5.8.zip Version: 1.5.8 tested --- PoC --- !/bin/python import...