Monalbum 0.8.7 Remote Code Execution Exploit

No description provided by source. ?php / \|/// \ - - // @ @ ----oOOo---oOOo--------------------------------------------------- Y! Underground Group [email protected] Dj7xpl.2600.ir ----ooooO-----Ooooo-------------------------------------------------- \ / \ /...

Monalbum 0.8.7 - Remote Code Execution

"; if isset$mod //submit $fichier = "../conf/config.inc.php"; $fd = fopen$fichier, "w"; $gcfgBase = $POST'gcfgBase'; $gcfgUser = $POST'gcfgUser'; $gcfgPass = $POST'gcfgPass'; $gcfgHote = $POST'gcfgHote'; $gpage = $POST'gpage'; $grepertoire = $POST'grepertoire'; $gfond = $POST'gfond'; $gtitre =...

Monalbum 0.8.7 - Remote Code Execution

Monalbum 0.8.7 - Remote Code Execution "; if isset$mod //submit $fichier = "../conf/config.inc.php"; $fd = fopen$fichier, "w"; $gcfgBase = $POST'gcfgBase'; $gcfgUser = $POST'gcfgUser'; $gcfgPass = $POST'gcfgPass'; $gcfgHote = $POST'gcfgHote'; $gpage = $POST'gpage'; $grepertoire =...

[SA19503] MonAlbum Multiple SQL Injection Vulnerabilities

TITLE: MonAlbum Multiple SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19503 VERIFY ADVISORY: http://secunia.com/advisories/19503/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Monalbum 0.x http://secunia.com/product/9121/ DESCRIPTION: undefined1 h...

CVE-2006-1585

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via 1 the pc parameter in a index.php and 2 pnom, 3 pcourriel, and 4 pcommentaire parameters in b imageagrandir.php...

Sql injection

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via 1 the pc parameter in a index.php and 2 pnom, 3 pcourriel, and 4 pcommentaire parameters in b imageagrandir.php...

CVE-2006-1585

Multiple SQL injection vulnerabilities in MonAlbum 0.8.7 allow remote attackers to execute arbitrary SQL commands via 1 the pc parameter in a index.php and 2 pnom, 3 pcourriel, and 4 pcommentaire parameters in b imageagrandir.php...

PT-2006-2584 · Monalbum · Monalbum

Name of the Vulnerable Software and Affected Versions: MonAlbum version 0.8.7 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved through SQL injection vulnerabilities in multiple parameters, including pc in index.php, and pnom, pcourriel, pcommentai...

MonAlbum 0.8.7 SQL Injection

advisory by undefined1 @ bash-x.net/undef/ Mon Album 0.8.7 http://www.3dsrc.com/monalbum/ There are 2 sql injection flaws in MonAlbum 0.8.7. First in index.php line 99 if isset$GET"pc" $pc = $GET"pc"; ... no sanity checks if isset$pc && $grechinactive $result = executerequete"select idrub, nom,...

IlohaMail External Programs Vulnerabilities

The target is running at least one instance of IlohaMail version 0.8.6. This version may contain flaws in the spell check and GnuPG features that allow an authenticated attacker to run arbitrary commands with the privileges of the web user simply by enclosing them in backticks when spell checking...

PT-2003-1354 · Ethereal · Ethereal

Name of the Vulnerable Software and Affected Versions: Ethereal versions 0.8.7 through 0.9.9 Description: A format string issue in the SOCKS dissector of Ethereal allows remote attackers to execute arbitrary code via SOCKS packets containing format string specifiers. Recommendations: For Ethereal...