Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling

Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind javascript:document.cookie = "apacookielogin=foo; path=/;"; javascript:document.cookie = "apacookiepassword=bar; path=/;"; milw0rm.com 2008-09-26...

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting SQL Injection

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting SQL Injection ----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net...

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection

----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date: 25.09.2008 [email protected]...

Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities

No description provided by source. ----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date:...

Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Atomic Photo Album 1.1.0pre4 XSS/SQL Remote Vulnerabilities =============================================================...

atomic-sqlxss.txt

----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date: 25.09.2008 [email protected]...

availphoto-sqlxss.txt

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Photo Album pics.php Multiple Vulnerabilities Vendor:...

Availscript Photo Album (pics.php) Multiple Vulnerabilities

No description provided by source. /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Photo Album pics.php Multiple...

AvailScript Photo Album - pics.php Multiple Vulnerabilities

AvailScript Photo Album - pics.php Multiple Vulnerabilities /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Photo...

Availscript Photo Album (pics.php) Multiple Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Availscript Photo Album pics.php Multiple Vulnerabilities =========================================================== Title: Availscript Photo Album pics.php Multiple...

AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Photo Album pics.php Multiple Vulnerabilities Vendor:...

Unfixed XSS vulnerability at www.beepworld.de

Security researcher BackDoor, has submitted on 09/06/2008 a cross-site-scripting XSS vulnerability affecting www.beepworld.de, which at the time of submission ranked 5602 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is current...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...

Gallery < 1.5.8 modules.php phpEx Parameter Traversal Local File Inclusion

Binary data 4619.prm...

CVE-2008-2722

Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive...

CVE-2008-2721

Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albums by attempting to add a new album to a hidden album...

Code injection

Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albums by attempting to add a new album to a hidden album...

CVE-2008-2724

Menalto Gallery before 2.2.5 does not enforce permissions for non-album items that have been protected by a password, which might allow remote attackers to bypass intended access restrictions...

CVE-2008-2721

The CVE-2008-2721 vulnerability affects Menalto Gallery before 2.2.5 in the album-select module. An unspecified flaw could allow remote attackers to obtain titles of hidden albums by attempting to add a new album to a hidden album, indicating information disclosure without impacting integrity or ...

CVE-2008-2721

Unspecified vulnerability in the album-select module in Menalto Gallery before 2.2.5 allows remote attackers to obtain titles of hidden albums by attempting to add a new album to a hidden album...