Adds the NextGen Arbitrary File Upload vuln

This commit is contained in:
erwanlr
2014-07-06 22:16:49 +02:00
parent 0469128917
commit e7c9c884e9

View File

@@ -4452,6 +4452,15 @@
</plugin>
<plugin name="nextgen-gallery">
<vulnerability>
<title>NextGEN Gallery &amp; 2.0.66 - Arbitrary File Upload (the user must have upload privileges)</title>
<references>
<url>http://packetstormsecurity.com/files/127340/wpnextgen2063-shell.txt</url>
</references>
<type>UPLOAD</type>
<!-- The 2.0.65 has a bypass, properly fixed in 2.0.66 -->
<fixed_in>2.0.66</fixed_in>
</vulnerability>
<vulnerability>
<title>NextGEN Gallery 2.0.0 - Directory Traversal</title>
<references>