WordPress NextGEN Gallery Plugin Path Disclosure Vulnerability

Bugtraq ID:	57957
Class:	Unknown
CVE:	CVE-2013-0291
Remote:	Yes
Local:	No
Published:	Feb 14 2013 12:00AM
Updated:	Feb 15 2013 01:21PM
Credit:	Henrique Montenegro
Vulnerable:
Not Vulnerable:

WordPress NextGEN Gallery Plugin Path Disclosure Vulnerability

The NextGEN Gallery plugin for WordPress is prone to a path-disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information that may lead to further attacks.

NextGEN Gallery versions 1.9.10 and 1.9.11 are vulnerable; other versions may also be affected.

WordPress NextGEN Gallery Plugin Path Disclosure Vulnerability

Attackers can exploit this issue using a web browser.

The following example URIs are available:

http://www.example.com/?callback=json&api_key=true&format=json&method=gallery&id=1

http://www.example.com/?callback=json&api_key=true&format=xml&method=recent&limit=1

WordPress NextGEN Gallery Plugin Path Disclosure Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

WordPress NextGEN Gallery Plugin Path Disclosure Vulnerability

References:

• NextGEN Gallery Homepage (Alex Rabe)
  
• WordPress Homepage (WordPress)