Beveiligingsadvies

CVE-2016-6565

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-07-13 20:00:00

Laatst bijgewerkt 2024-08-06 01:36:28

Toegewezen door certcc

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POST request, which may allow an authenticated user to read arbitrary files from the server, or execute arbitrary code on the server in some circumstances (dependent on server configuration).

← Alle CVE's bekijken Bekijk op cve.org ↗