SQL injection and Path Disclosure Auth Bypass in 4images 1.7.X

-----------Summary----------- eVuln ID: 200 Software: "Powered by 4images" Vendor: PHP Web Scripts Version: 4images 1.7.X dork: "Powered by 4images" Critical Level: medium Type: SQL injection and Path Disclosure Status: Unpatched. No reply from developers PoC: Available Solution: Not available...

4homepages 4Images 1.7.x - categories.php SQL Injection

4homepages 4Images 1.7.x - categories.php SQL Injection source: https://www.securityfocus.com/bid/45079/info 4homepages 4images is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

4homepages 4Images 1.7.x - 'categories.php' SQL Injection

source: https://www.securityfocus.com/bid/45079/info 4homepages 4images is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application,...

4Images 1.7.x SQL Injection

-----------Summary----------- eVuln ID: 200 Software: "Powered by 4images" Vendor: PHP Web Scripts Version: 4images 1.7.X dork: "Powered by 4images" Critical Level: medium Type: SQL injection and Path Disclosure Status: Unpatched. No reply from developers PoC: Available Solution: Not available...

4images 1.7.8 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================= 4images 1.7.8 Remote File Inclusion Vulnerability ================================================= Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://www.4homepages.de/4images/download.php...

4images 1.7.8 Remote File Inclusion

Exploit Title: 4images1.7.8 Remote File Include Date: 23-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://www.4homepages.de/4images/download.php Version: v 1.7.8 Tested on: Windows XP CVE : Contact: LoSt.HaCkEratyahoodotcom /0r/ [email protected]...

4Images 1.7.8 - Remote File Inclusion

Exploit Title: 4images1.7.8 Remote File Include Date: 23-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://www.4homepages.de/4images/download.php Version: v 1.7.8 Tested on: Windows XP CVE : Contact: LoSt.HaCkEratyahoodotcom /0r/ [email protected]...

4Images 1.7.8 - Remote File Inclusion

4Images 1.7.8 - Remote File Inclusion Exploit Title: 4images1.7.8 Remote File Include Date: 23-8-2010 Author: LoSt.HaCkEr / aDaMTRoJaN Software Link: http://www.4homepages.de/4images/download.php Version: v 1.7.8 Tested on: Windows XP CVE : Contact: LoSt.HaCkEratyahoodotcom /0r/ ...

4images 1.7.7 Command Execution

|| || | || o,7 || . o7 || 4||| ow, : / / . +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

4Images 1.7.7 - image_utils.php Remote Command Execution

4Images 1.7.7 - imageutils.php Remote Command Execution || || | || o,7 || . o7 || 4||| ow, : / / . +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | |...

4images <= 1.7.7 (image_utils.php) Remote Command Execution

Exploit for php platform in category web applications ========================================================================= 4images = 1.7.7 imageutils.php Remote Command Execution Vulnerability ========================================================================= + Script :4images +...

4Images 1.7.7 - 'image_utils.php' Remote Command Execution

|| || | || o,7 || . o7 || 4||| ow, : / / . +----------------------------------------------------------------------- -+ | ....... | | ..''xxxxxxxxxxxxxxx'... | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxx.. | | ..'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'. | | .'xxxxxxxxxxxxxxxxxxxxxxxxxxxx'''.......'. | |...

4images 1.7.1 Remote SQL Injection Vulnerability

No description provided by source. Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author: Master Mind Version: 1.7.1 CVE : N/A ============================================================= Script Name : 4images 1.7.1 Language : php Author : Master Mind Home :...

4Images 1.7.1 - SQL Injection

4Images 1.7.1 - SQL Injection Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author: Master Mind Version: 1.7.1 CVE : N/A ============================================================= Script Name : 4images 1.7.1 Language : php Author : Master Mind Home :...

4Images 1.7.1 - SQL Injection

Exploit Title: 4images 1.7.1 Remote SQL Injection Vulnerability Date: 20-12-2009 Author: Master Mind Version: 1.7.1 CVE : N/A ============================================================= Script Name : 4images 1.7.1 Language : php Author : Master Mind Home : www.shdowskill.com , www.vbspiders.com...

Cross site scripting

Cross-site scripting XSS vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable...

CVE-2009-2380

Cross-site scripting XSS vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable...

CVE-2009-2380

CVE-2009-2380 affects 4images 1.7–1.7.7, where an XSS flaw exists in includes/functions.php via the url variable, enabling remote injection of arbitrary script/HTML. No remediation details are provided in the supplied documents.

CVE-2009-2132

Directory traversal vulnerability in global.php in 4images before 1.7.7, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the l parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted userhomepage parameter to member.php, and then posting a comment associated with a picture...