WordPress WP Photo Album Plus Plugin <= 6.1.2 - Multiple XSS

Because of these vulnerabilities in wppa-ajax-front.php, the attackers can inject arbitrary web script or HTML via the "comemail" or "comname" parameters. Solution Update the plugin...

vPhoto-Album 4.2 iOS - Local File Inclusion

vPhoto-Album 4.2 iOS - Local File Inclusion Document Title: =============== vPhoto-Album v4.2 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-05 Vulnerability Laboratory ID...

vPhoto-Album 4.2 Local File Inclusion

Document Title: =============== vPhoto-Album v4.2 iOS - File Include Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 147...

vPhoto-Album v4.2 iOS - File Upload Web Vulnerability

Document Title: =============== vPhoto-Album v4.2 iOS - File Upload Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-05 Vulnerability Laboratory ID VL-ID: ==================================== 1477...

vPhoto-Album v4.2 iOS - File Upload Web Vulnerability

Document Title: =============== vPhoto-Album v4.2 iOS - File Upload Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1477 Release Date: ============= 2015-05-04 Vulnerability Laboratory ID VL-ID: ==================================== 1477...

Cross site scripting

Cross-site scripting XSS vulnerability in the Facebook Album Fetcher module for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3390

Cross-site scripting XSS vulnerability in the Facebook Album Fetcher module for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-3390

CVE-2015-3390 corresponds to an XSS vulnerability in the Drupal module Facebook Album Fetcher . The issue arises from printing fields without proper sanitization, allowing remote authenticated users with the "access administration pages" permission to inject arbitrary script/HTML via unspecified ...

PT-2015-6210

Name of the Vulnerable Software and Affected Versions Drupal affected versions not specified Description A cross-site scripting XSS issue exists in the Facebook Album Fetcher module, allowing remote authenticated users with the "access administration pages" permission to inject arbitrary web scri...

CVE-2015-3390: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Facebook Album Fetcher module for Drupal allows remote authenticated users with the "access administration pages" permission to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0892

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-0892

Maroyaka Image Album (CGI) is affected by a cross-site scripting (XSS) vulnerability. Reports from JVN/JVNDB and CNVD/NVD indicate that vulnerable versions are Maroyaka Image Album ver1.00 and earlier. The vulnerability allows remote attackers to inject arbitrary web script or HTML that can be ex...

CVE-2015-0892: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Maroyaka CGI Maroyaka Image Album allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2015-4948

Name of the Vulnerable Software and Affected Versions Maroyaka CGI Maroyaka Image Album affected versions not specified Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors, potentially leading to...

Maroyaka CGI Maroyaka Image Album Cross-Site Scripting Vulnerability

Maroyaka CGI Maroyaka Image Album is a CGI script for placing image files into websites. A cross-site scripting vulnerability exists in Maroyaka CGI Maroyaka Image Album. A remote attacker could use this vulnerability to inject arbitrary web script or HTML...

Maroyaka Image Album vulnerable to cross-site scripting

Overview Maroyaka Image Album provided by Maroyaka CGI is a CGI script for placing image files within a website. Maroyaka Image Album contains a cross-site scripting vulnerability. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

JVN#09871547: Maroyaka Image Album vulnerable to cross-site scripting

Maroyaka Image Album provided by Maroyaka CGI is a CGI script for placing image files within a website. Maroyaka Image Album contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest versi...

Value 1 2 5 0 0 dollars to the Facebook album delete vulnerability-vulnerability warning-the black bar safety net

Overview: if your photo is deleted unknowingly, what will you do? Obviously, this problem is very annoying huh? This post is to say I found a vulnerability which allows a malicious user to delete Facebook on any album. Yes, any user, page, group, photo album can be deleted. The Graph API is the...

Facebook Vulnerability Allows Hacker to Delete Any Photo Album

A Serious vulnerability in Facebook has recently been reported that could allow anyone to delete your complete Facebook photo album without having authentication. Security Researcher Laxman Muthiyah told The Hacker News that the vulnerability actually resides in Facebook Graph API mechanism, whic...