CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2138

The CVE-2013-2138 issue affects Gallery 3 before 3.0.8 where the uploadify and flowplayer SWF files do not properly remove query parameters and fragments, allowing an unspecified impact via a replay attack. Related entry CVE-2013-2240 notes that lib/flowplayer.swf.php in Gallery 3 before 3.0.9 al...

Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability

Title: ====== Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability Date: ===== 2013-09-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1080 VL-ID: ===== 1080 Common Vulnerability Scoring System: ==================================== 6....

CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

Unrestricted file upload

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2013-5962

The CVE-2013-5962 entry relates to the WordPress plugin Complete Gallery Manager (before 3.3.4 rev40279). Affected component: frames/upload-images.php which permits an unrestricted file upload. Root cause: uploading a file with an executable extension allows remote attackers to access the uploade...

Piwigo 2.5.2 Cross Site Scripting

Piwigo 2.5.2 Cross Site Scripting Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode...

Piwigo 2.5.2 - Cross-Site Scripting

Piwigo 2.5.2 - Cross-Site Scripting Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode...

Piwigo 2.5.2 - Cross-Site Scripting

Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode http://localhost/piwigo/admin.php?page=batchmanager&mode=un...

WordPress Complete Gallery Manager 3.3.3 File Upload

Title: ====== Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability Date: ===== 2013-09-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1080 VL-ID: ===== 1080 Common Vulnerability Scoring System: ==================================== 6....

WordPress Complete Gallery Manager 3.3.3 File Upload Vulnerability

WordPress Complete Gallery Manager version 3.3.3 suffers from a remote shell upload vulnerability. Introduction: ============= Using Complete Gallery Manager will make it fun and fast to manage and create galleries for your website. The plugin enables a wealth of functionality, but just because y...

WordPress Complete Gallery Manager Plugin 3.3.3 - Arbitrary File Upload

Complete Gallery Manager is prone to an arbitrary file upload vulnerability that is located in the /plugins/complete-gallery-manager/frames/ path when processing to upload via the upload-images.php file own malicious context or webshells.The vulnerability allows the attackers to upload files via...

WP Complete Gallery Manager 3.3.3 - Arbitrary File Upload

Document Title: =============== WP Complete Gallery Manager 3.3.3 - Arbitrary File Upload References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1080 Release Date: ============= 2013-09-16 Vulnerability Laboratory ID VL-ID: ====================================...

Cross site scripting

Cross-site scripting XSS vulnerability in Twilight CMS 5.17 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to the gallery/ page...

Wordpress post-gallery Plugin Xss vulnerabilities

The Wordpress post-gallery Plugin suffers from a Cross-Site Scripting vulnerability. Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress post-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected]...

WordPress NextGen Smooth Gallery Plugin <= 1.2 XSS Vulnerability

The WordPress plugin SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wordpress:wordpress"; ifdescription...

WordPress NextGen Smooth Gallery Cross Site Scripting

Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress nextgen-smooth-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected] Home : http://iedb.ir - http://iedb.ir/acc Software Link :...

MusicBox 2.3.8 - Multiple Vulnerabilities

MusicBox 2.3.8 - Multiple Vulnerabilities Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008...

MusicBox 2.3.8 - Multiple Vulnerabilities

Exploit Title : Musicbox 2.3.8 Multiple Vulnerabilities Author : DevilScreaM Date : 25/08/2013 Category : Web Applications Vendor : http://www.musicboxv2.com/ Version : 1.0 - 2.3.8 Dork intext:Musicbox Version intext:Musicbox Version 2.3.8 © 2008 inurl:genrealbums.php?id= Vulnerability : SQL...