WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com...

GRAND Flash Album Gallery 0.55 SQL Injection / File Disclosure

=============================== Vulnerability ID: HTB22871 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureingrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor...

Galilery 1.0 local file inclusion vulnerability-vulnerability warning-the black bar safety net

Galilery is a PHP prepared by the open source photo album system, Galilery 1.0 the presence of local file inclusion vulnerability that may lead to sensitive information disclosure. +info: Galilery 1.0 Local File Inclusion Vulnerability $ cat 15lfigalilery.1.0.txt exploit title: local file include...

Multiple Vulnerabilities in GRAND Flash Album Gallery

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in GRAND Flash Album Gallery which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in GRAND Flash Album Gallery The vulnerability exists...

TinyWebGallery 1.8.3 version multiple vulnerabilities-vulnerability warning-the black bar safety net

TinyWebGallery is a php photo album program, TinyWebGallery 1.8.3 contains multiple security vulnerabilities, including directory traversal andXSS, may lead to sensitive information disclosure. +info: Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home:...

Facebook virus spreads via photo album chat messages !

A new social networking worm in the vein of Koobface is currently doing the rounds. A Naked Security reader, George, who had been exposed to it on Facebook reported it to us - unlike the majority of Facebook scams we report, this one actively infects your computer with malware instead of simply...

“Happy one hundred phases in the Park”photo album GETSHELL vulnerabilities-vulnerability warning-the black bar safety net

The vulnerability appears in the index.php if$do == 'upload' if$POST'formsub' $file = $FILES'upload'; if!$ file'error' ifstrpos$file'type', 'image' === 0 $hash = $POST'i'.'. jpg'; //if IIS, then here can be self-configured IIS malformed file extension to get a webshell...

Atomic Photo Album 1.0.2 SQL Injection / Cross Site Scripting

Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-9999 union all select...

Atomic Photo Album 1.0.2 - Multiple Vulnerabilities

Atomic Photo Album 1.0.2 - Multiple Vulnerabilities Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-999...

Atomic Photo Album 1.0.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ================================================= Atomic Photo Album 1.0.2 Multiple Vulnerabilities ================================================= Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities...

Atomic Photo Album 1.0.2 - Multiple Vulnerabilities

Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-9999 union all select...

TCW PHP Album 'album' Parameter Multiple Vulnerabilities

TCW PHP Album is prone to multiple input validation vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2715

Cross-site scripting XSS vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

CVE-2010-2714

SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter...

Sql injection

SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

CVE-2010-2715

Cross-site scripting XSS vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

CVE-2010-2714

SQL injection vulnerability in photos/index.php in TCW PHP Album 1.0 allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2010-2715

CVE-2010-2715 describes a cross-site scripting (XSS) vulnerability in TCW PHP Album 1.0, specifically in photos/index.php via the album parameter, allowing remote attackers to inject arbitrary web script/HTML. The NVD entry records a CVSSv2 base score of 4.3 (Medium). The connected OpenVAS entry ...

CVE-2010-2714

TCW PHP Album 1.0 is affected by an SQL injection in the photos/index.php handler, exploitable via the album parameter. Root cause: improper input handling on the album parameter leads to arbitrary SQL execution. Impact: remote attackers can run arbitrary SQL commands (no authentication required ...