12366 matches found
Fedora 17 : gallery3-3.0.9-1.fc17 (2013-12441)
Fixes for CVE-2013-2240, CVE-2013-2241. A security flaw was found in the way flowplayer SWF file handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to this...
Fedora 19 : gallery3-3.0.8-1.fc19 (2013-10032)
A security flaw was found in the way uploadify and flowplayer SWF files handling functionality of Gallery version 3, an open source project with the goal to develop and support leading photo sharing web application solutions, processed certain URL fragments passed to these files certain URL...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 gallery shortcodes or 2 the content of a post...
DEBIAN-CVE-2013-0236
Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 gallery shortcodes or 2 the content of a post...
CVE-2013-0236
Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 gallery shortcodes or 2 the content of a post...
CVE-2013-0236
Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 gallery shortcodes or 2 the content of a post...
CVE-2013-0236
Multiple cross-site scripting XSS vulnerabilities in WordPress before 3.5.1 allow remote attackers to inject arbitrary web script or HTML via vectors involving 1 gallery shortcodes or 2 the content of a post...
CVE-2013-0236
CVE-2013-0236: WordPress before 3.5.1 has multiple XSS vulnerabilities via gallery shortcodes and post content. Affected component is WordPress core; root cause is improper sanitization of user input in these vectors. Impact per sources is partial integrity compromise (I:P) with no confidentialit...
WordPress category-grid-view-galler plugin Cross-Site Scripting Vulnerabilities
The WordPress category-grid-view-galler plugin suffers from a Cross-Site Scripting vulnerability. Iranian Exploit DataBase http://exploit.iedb.ir Exploit Title : WordPress category-grid-view-galler plugin Cross-Site Scripting Vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb...
Gallery 3.0.x < 3.0.9 Multiple Vulnerabilities
According to its version number, the Gallery install hosted on the remote web server is affected by multiple vulnerabilities : - A security bypass vulnerability exists in the 'flowplayer.swf.php' script. - The application is affected by multiple information disclosure vulnerabilities in the...
WordPress Plugin Category Grid View Gallery - 'ID' Cross-Site Scripting
source: https://www.securityfocus.com/bid/60905/info The Category Grid View Gallery plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...
WordPress Category Grid View Gallery Plugin - Cross Site Scripting
WordPress Category Grid View Gallery plugin's "ID" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker c...
gallery -- multiple vulnerabilities
Red Hat Security Response Team reports: Gallery upstream has released 3.0.9 version, correcting two security flaws: Issue 1 - Improper stripping of URL fragments in flowplayer SWF file might lead to reply attacks a different flaw than CVE-2013-2138. Issue 2 - gallery3: Multiple information exposu...
Gallery 3.0.x < 3.0.8 Multiple XSS
According to its version number, the Gallery install hosted on the remote web server contains cross-site scripting vulnerabilities in the 'uploadify.swf' and 'flowplay.swf' files, where URL fragments and parameters are not properly sanitized when called via direct requests. An attacker may be abl...
NextGEN Gallery 1.9.12 Shell Upload
S21Sec Advisory - Title: NextGEN Gallery 1.9.12 Arbitrary File Upload ID: S21SEC-046-en CVE ID: CVE-2013-3684 Severity: High Status: Fixed History: 27.May.2013 Vulnerability discovered 28.May.2013 Vendor informed 12.Jun.2013 Fix released Authors: Marcos Agüero [email protected] URL:...
WordPress NextGEN Gallery - Arbitrary File Upload
NextGEN Gallery plugin is prone to an arbitrary file upload vulnerability. It allows an attacker to upload arbitrary files to the affected computer. Solution Update the plugin...
WordPress Plugin NextGEN Gallery - 'upload.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in an arbitrary code...
WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload
WordPress Plugin NextGEN Gallery - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/60533/info The NextGEN Gallery plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. An attacker may leverage this issue to upload arbitrary files t...
AVG Official Blog Cross Site Scripting
Title : Cross Site Scripting in AVG Official Blog Author : Ryuzaki Lawlet Blog : justryuz.blogspot.com / www.justryuz.com E-mail : [email protected] / [email protected] / [email protected] Date: 6/5/2013 4.44 pm Vendor: http://wordpress.org/plugins/nextgen-gallery/ Type : Web Apps Vect...
