CVE-2016-6565

The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user to read arbitrary files from the server, or execute arbitrary code on the server in some...

CVE-2016-6565: Improper Control of Filename for Include/Require Statement in PHP Program

The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user to read arbitrary files from the server, or execute arbitrary code on the server in some...

PT-2018-4961

Name of the Vulnerable Software and Affected Versions Imagely NextGen Gallery plugin for Wordpress versions prior to 2.1.57 Description The issue arises from improper validation of user input in the cssfile parameter of an HTTP POST request. This may allow an authenticated user to read arbitrary...

CVE-2007-1697: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter...

Philex 0.2.3 - Remote File Inclusion File Disclosure

Philex 0.2.3 - Remote File Inclusion File Disclosure Philex 0.2.3 Exploit Remote File Include: PathPhilex/header.inc.php?CssFile=Shell V.Code Disclosure: readfile$HTTPGETVARS"file"; Exploit Remote File Disclosure: PathPhilex/download.php?file=conf.inc.php milw0rm.com 2007-03-23...