CVE-2015-9538

Description

References

• cxsecurity.com/issue/WLB-2015080165 · Exploit
• cybersecurityworks.com/zerodays/cve-2015-9538-nextgen.html · Exploit
• cybersecurityworks/Disclosed · Exploit
• packetstormsecurity.com/files/135114/WordPress-NextGEN-Gallery-2.1.15-Cross-Site-Scripting-Path-Traversal.html · Exploit
• wordpress.org/plugins/nextgen-gallery · Release Notes
• openwall.com/lists/oss-security/2015/08/28/4 · Exploit
• openwall.com/lists/oss-security/2015/09/01/7 · Mailing List

nextgen gallery 的其他漏洞

• CVE-2024-10545低危 3.5The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.9 does not sanitise and escape some of its Image settings, which cou…
• CVE-2024-6393中危 4.8The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.5 does not sanitise and escape some of its Images settings, which co…
• CVE-2024-39627中危 4.8Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Imagely NextGEN Gallery allows …
• CVE-2024-5442中危 5.9The Photo Gallery, Sliders, Proofing and WordPress plugin before 3.59.3 does not sanitise and escape some of its settings, which could all…
• CVE-2024-2744中危 4.3The NextGEN Gallery WordPress plugin before 3.59.1 does not sanitise and escape some of its settings, which could allow high privilege user…