CVE-2008-7175

Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:alex_rabe:nextgen_gallery:*:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.33:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.34:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.35:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.36:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.37:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.39:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.40:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.41:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.42:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.43:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.50:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.51:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.52:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.60:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.61:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.62:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.63:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.64:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.70:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.71:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.72:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.73:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.74:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.80:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.81:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.82:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.83:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.90:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.91:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.92:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.93:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.94:*:*:*:*:*:*:*
cpe:2.3:a:alex_rabe:nextgen_gallery:0.95:*:*:*:*:*:*:*
cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*

History

21 Nov 2024, 00:58

Type Values Removed Values Added
References () http://osvdb.org/51428 - () http://osvdb.org/51428 -
References () http://www.securityfocus.com/archive/1/493182/100/0/threaded - () http://www.securityfocus.com/archive/1/493182/100/0/threaded -

Information

Published : 2009-09-08 10:30

Updated : 2024-11-21 00:58


NVD link : CVE-2008-7175

Mitre link : CVE-2008-7175

CVE.ORG link : CVE-2008-7175


JSON object : View

Products Affected

wordpress

  • wordpress

alex_rabe

  • nextgen_gallery
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')