47 matches found
CVE-2019-8943
WordPress through 5.0.3 allows Path Traversal in wpcropimage. An attacker who has privileges to crop an image can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring...
UBUNTU-CVE-2019-8943
WordPress through 5.0.3 allows Path Traversal in wpcropimage. An attacker who has privileges to crop an image can write the output image to an arbitrary directory via a filename containing two image extensions and ../ sequences, such as a filename ending with the .jpg?/../../file.jpg substring...
Focal Point - Moderately critical - Cross site scripting - SA-CONTRIB-2019-015
This module enables a privileged user to specify the important part of an image for the purposes of cropping. The module doesn't sufficiently sanitize certain form element attributes when the focal point widget is displayed on a form. This vulnerability is mitigated by the fact that an attacker...
Memory Corruption Vulnerability in WPS Text Kso Module
WPS is an office software developed by Kingsoft Office Software. A memory corruption vulnerability exists in the WPS Text Kso module. The vulnerability is due to the user to use the picture cropping function, the program failed to release the object members of the value caused by an attacker to...
Drupal EPSA Crop - Image Cropping Module Cross-Site Scripting Vulnerability
Drupal is a free, open-source content management system developed in the PHP language and maintained by the Drupal community. A cross-site scripting vulnerability exists in Drupal EPSA Crop - Image Cropping, which allows remote attackers to exploit the vulnerability to inject malicious script or...
snipegallery-3.1.5 Multiple Vulnerability
Exploit for php platform in category web applications ========================================= snipegallery-3.1.5 Multiple Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...
[SECURITY] Fedora 9 Update: perl-Imager-0.64-2.fc9
Imager is a module for creating and altering images. It can read and write various image formats, draw primitive shapes like lines,and polygons, blend multiple images together in various ways, scale, crop, render text and more...