Memberkit 1.0 Remote File Upload

================================================================= =================Memberkit 1.0 Remote File Upload================ ================================================================= Vendor: http://www.memberkit.com/ Discovered: 12-30-08 Discovered By: Lo$er Dork: "Powered by...

Pixel8 Web Photo Album 3.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Pixel8 Web Photo Album 3.0 Remote SQL Injection Vulnerability =============================================================...

Pixel8 Web Photo Album 3.0 - SQL Injection

-------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : Pixel8 Web Photo Album v3.0 download : null Demo : http://www.jayeshp.com/Pixel8/Files/Demo.asp Exploits : --=SQL INJECTION=--...

Pixel8 Web Photo Album 3.0 - SQL Injection

Pixel8 Web Photo Album 3.0 - SQL Injection -------------------------------AlpHaNiX---------------------------------- Found By : AlpHaNiX website : www.nullarea.net contact : AlpHaATHACKERDOTBZ script : Pixel8 Web Photo Album v3.0 download : null Demo : http://www.jayeshp.com/Pixel8/Files/Demo.asp...

Social Groupie (create_album.php) Remote File Upload Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Social Groupie File Upload Vulnerability

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Social Groupie - 'create_album.php' Arbitrary File Upload

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Social Groupie - create_album.php Arbitrary File Upload

Social Groupie - createalbum.php Arbitrary File Upload || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | |...

Gallery: Multiple vulnerabilities

Background Gallery is an open source web based photo album organizer. Description Multiple vulnerabilities have been discovered in Gallery 1 and 2: Digital Security Research Group reported a directory traversal vulnerability in contrib/phpBB2/modules.php in Gallery 1, when registerglobals is...

CVE-2008-4714

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

Authentication flaw

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

CVE-2008-4714

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

CVE-2008-4714

CVE-2008-4714 affects Atomic Photo Album 1.1.0 pre4, where improper handling of the apa_cookie_login and apa_cookie_password cookies can allow remote attackers to bypass authentication and gain administrative access by modifying cookies. The vulnerability is documented in multiple sources (NVD en...

CVE-2008-4626

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4626

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4626

The CVE-2008-4626 issue affects yappa-ng (Fritz Berger yet another php photo album) paired with PHP. A Local File Inclusion vulnerability exists in index.php: when magic_quotes_gpc is disabled, the album parameter can cause the script to include and potentially execute local files. Affected versi...

yappa-ng <= 2.3.3-beta0 (album) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================== yappa-ng = 2.3.3-beta0 album Local File Inclusion Vulnerability ==================================================================...

CVE-2008-4370

Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...

CVE-2008-4369

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...