WordPress DZS Video Gallery Plugin 3.1.3 - Remote and Local File Disclosure Vulnerabilities

DZS Video Gallery plugin is prone to remote and local files disclosure vulnerabilities. Solution Upgrade the plugin...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure Local File Disclosure

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure Local File Disclosure Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage:...

WordPress Plugin page-flip-image-gallery - Arbitrary File Upload

WordPress Plugin page-flip-image-gallery - Arbitrary File Upload Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link :...

WordPress Plugin page-flip-image-gallery - Arbitrary File Upload

Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link : http://downloads.wordpress.org/plugin/page-flip-image-gallery.zip Google dork:...

WordPress Page Flip Image Gallery Plugins - Remote File Upload

Page Flip Image Gallery plugin is prone to a remote file upload vulnerability. Solution Upgrade the plugin...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote File Disclosure / Local File Disclosure

Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File: preview.php Date: 03/12/2013 Explo...

WordPress DZS Video Gallery Plugin - Remote File Upload

WordPress DZS Video Gallery plugin is prone to a remote file upload vulnerability. Solution Upgrade the plugin...

WordPress Gallery Bank 2.0.19 Cross Site Scripting

SOJOBO-ADV-13-03 - Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting I. Information ================== Name : Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting Software : Gallery Bank 2.0.19 and possibly below. Vendor Homepage : http://gallery-bank.com/...

Contexis CMS 1.0 Cross Site Scripting

CVE-2013-6239:Contexis 1.0 CMS, Reflected Xss Severity: Medium Vendor: exis-ti.com Versions Affected: 1.0 Description: The contexist has be found the reflected XSS Vulnerability if use the photo gallery model someone can insert xss code at the url executing javascript codes on the web. Exploit: G...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2241

modules/gallery/helpers/datarest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information image files via the "full" string in the size parameter...

Design/Logic Flaw

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

Design/Logic Flaw

modules/gallery/helpers/datarest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information image files via the "full" string in the size parameter...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

Security feature bypass

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2241

modules/gallery/helpers/datarest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information image files via the "full" string in the size parameter...

CVE-2013-2240

The CVE-2013-2240 issue affects Gallery 3, specifically the lib/flowplayer.swf.php component used in Gallery 3 prior to version 3.0.9. The vulnerability arises because query fragments are not properly removed, which could enable a remote attacker to achieve an unspecified impact via a replay atta...

CVE-2013-2241

The CVE-2013-2241 issue affects Gallery3 before 3.0.9, where data_rest.php could bypass access restrictions via the size parameter with the string “full,” allowing an attacker to access sensitive image files. The vulnerability is rooted in improper access control checks in the data_rest core modu...