Joomla Themes Cross Site Scripting / Denial Of Service

Hello list! I want to warn you about Cross-Site Scripting, Full path disclosure, Abuse of Functionality and Denial of Service vulnerabilities in multiple themes and components for Joomla. ------------------------- Affected products: ------------------------- Similarly to vulnerabilities in multip...

Fedora Update for kphotoalbum FEDORA-2011-5200

Check for the Version of kphotoalbum OpenVAS Vulnerability Test Fedora Update for kphotoalbum FEDORA-2011-5200 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

WordPress GRAND Flash Album Gallery Plugin Multiple Vulnerabilities

WordPress GRAND Flash Album Gallery Plugin is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

[SECURITY] Fedora 14 Update: kphotoalbum-4.1.1-8.fc14

A photo album tool. Focuses on three key points: It must be easy to describe a number of images at a time. It must be easy to search for images. It must be easy to browse and View the images...

Dalbum 1.43 - 'editini.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47427/info Dalbum is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Cross-site Scripting (XSS) Vulnerability in WP Photo Album

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WP Photo Album which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WP Photo Album The vulnerability exists due to input sanitation error in the "id" parameter in...

Cross-site Scripting (XSS) Vulnerability in Max's PHP Photo Album

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Max's PHP Photo Album which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Max's PHP Photo Album The vulnerability exists due to input sanitation error in the "id"...

Wordpress GRAND Flash Album Gallery 0.55 Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA -...

HTB22870: SQL Injection in GRAND Flash Album Gallery wordpress plugin

Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011 Vulnerabili...

HTB22871: File Content Disclosure in GRAND Flash Album Gallery wordpress plugin

Vulnerability ID: HTB22871 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureingrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011...

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities

Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor Notification: 22 February 2011...

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities

WordPress Plugin GRAND Flash Album Gallery 0.55 - Multiple Vulnerabilities Vulnerability ID: HTB22870 Reference: http://www.htbridge.ch/advisory/sqlinjectioningrandflashalbumgalle rywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com...

GRAND Flash Album Gallery 0.55 SQL Injection / File Disclosure

=============================== Vulnerability ID: HTB22871 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureingrandflashalbumgallerywordpressplugin.html Product: GRAND Flash Album Gallery wordpress plugin Vendor: Sergey Pasyuk http://codeasily.com/ Vulnerable Version: 0.55 Vendor...

Galilery 1.0 local file inclusion vulnerability-vulnerability warning-the black bar safety net

Galilery is a PHP prepared by the open source photo album system, Galilery 1.0 the presence of local file inclusion vulnerability that may lead to sensitive information disclosure. +info: Galilery 1.0 Local File Inclusion Vulnerability $ cat 15lfigalilery.1.0.txt exploit title: local file include...

Multiple Vulnerabilities in GRAND Flash Album Gallery

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in GRAND Flash Album Gallery which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in GRAND Flash Album Gallery The vulnerability exists...

TinyWebGallery 1.8.3 version multiple vulnerabilities-vulnerability warning-the black bar safety net

TinyWebGallery is a php photo album program, TinyWebGallery 1.8.3 contains multiple security vulnerabilities, including directory traversal andXSS, may lead to sensitive information disclosure. +info: Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home:...

Facebook virus spreads via photo album chat messages !

A new social networking worm in the vein of Koobface is currently doing the rounds. A Naked Security reader, George, who had been exposed to it on Facebook reported it to us - unlike the majority of Facebook scams we report, this one actively infects your computer with malware instead of simply...

“Happy one hundred phases in the Park”photo album GETSHELL vulnerabilities-vulnerability warning-the black bar safety net

The vulnerability appears in the index.php if$do == 'upload' if$POST'formsub' $file = $FILES'upload'; if!$ file'error' ifstrpos$file'type', 'image' === 0 $hash = $POST'i'.'. jpg'; //if IIS, then here can be self-configured IIS malformed file extension to get a webshell...

Atomic Photo Album 1.0.2 SQL Injection / Cross Site Scripting

Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-9999 union all select...

Atomic Photo Album 1.0.2 - Multiple Vulnerabilities

Atomic Photo Album 1.0.2 - Multiple Vulnerabilities Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-999...