CVE-2008-2722

Menalto Gallery before 2.2.5 allows remote attackers to bypass permissions for sub-albums via a ZIP archive...

Unfixed XSS vulnerability at www.moes-feilbingert.de

Security researcher IHZTEAM, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.moes-feilbingert.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/08/2009. It is...

Unfixed XSS vulnerability at www.cogitatio.net

Security researcher IHZTEAM, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.cogitatio.net, which at the time of submission ranked 7185613 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It is...

WordPress Plugin WP Photo Album - 'photo' SQL Injection

source: https://www.securityfocus.com/bid/29148/info The WordPress WP Photo Album WPPA plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

WordPress Plugin WP Photo Album - photo SQL Injection

WordPress Plugin WP Photo Album - photo SQL Injection source: https://www.securityfocus.com/bid/29148/info The WordPress WP Photo Album WPPA plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Adobe Photoshop Album Starter Edition BMP image header buffer overflow

Added: 05/08/2008 CVE: CVE-2008-1765 BID: 28874 OSVDB: 44579 Background Adobe Photoshop Album Starter Edition is free software for editing and sharing photos. Problem A buffer overflow vulnerability in Adobe Photoshop Album Starter Edition allows command execution when a user opens a BMP image fi...

Adobe Photoshop Album Starter Edition BMP image header buffer overflow

Added: 05/08/2008 CVE: CVE-2008-1765 BID: 28874 OSVDB: 44579 Background Adobe Photoshop Album Starter Edition is free software for editing and sharing photos. Problem A buffer overflow vulnerability in Adobe Photoshop Album Starter Edition allows command execution when a user opens a BMP image fi...

Adobe Photoshop Album Starter Edition BMP image header buffer overflow

Added: 05/08/2008 CVE: CVE-2008-1765 BID: 28874 OSVDB: 44579 Background Adobe Photoshop Album Starter Edition is free software for editing and sharing photos. Problem A buffer overflow vulnerability in Adobe Photoshop Album Starter Edition allows command execution when a user opens a BMP image fi...

Adobe Photoshop Album Starter Edition BMP image header buffer overflow

Added: 05/08/2008 CVE: CVE-2008-1765 BID: 28874 OSVDB: 44579 Background Adobe Photoshop Album Starter Edition is free software for editing and sharing photos. Problem A buffer overflow vulnerability in Adobe Photoshop Album Starter Edition allows command execution when a user opens a BMP image fi...

CVE-2008-1765

CVE-2008-1765 : Buffer overflow in Adobe Photoshop Album Starter Edition 3.2 (and possibly After Effects CS3) allows code execution via a BMP file with an invalid image header. The issue is user-assisted or physically proximate, per vendor reports; related Photoshop CS3 issue tracked as CVE-2007-...

Adobe Photoshop Album Starter Edition BMP图形头处理缓冲区溢出漏洞

BUGTRAQ ID: 28874 CVECAN ID: CVE-2008-1765 Adobe Photoshop Album Starter Edition是Adobe公司专为处理相片的用户设计的Photoshop简化版本，允许用户更容易的修改、美化照片。 Album Starter在渲染图形之前没有正确地验证BMP图形头是否有效，如果用户受骗打开了恶意的bmp图形文件的话，就可能触发缓冲区溢出，导致执行任意代码。此外，Album...

adobealbum-overflow.txt

Exploitable issue in various Adobe products c0ntex [email protected] Scott Laurie February 2008 Vulnerable applications, tested: Adobe Photoshop Album Starter Adobe After Effects CS3 Adobe Photoshop CS3 Not Vulnerable applications, tested: Adobe Reader Adobe Flash Player This bug is related to th...

Adobe Album Starter 3.2 Unchecked Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits =============================================================== Adobe Album Starter 3.2 Unchecked Local Buffer Overflow Exploit =============================================================== Exploitable issue in various Adobe products c0nte...

Adobe Album Starter 3.2 Unchecked Local Buffer Overflow Exploit

No description provided by source. Exploitable issue in various Adobe products c0ntex [email protected] Scott Laurie February 2008 Vulnerable applications, tested: Adobe Photoshop Album Starter Adobe After Effects CS3 Adobe Photoshop CS3 Not Vulnerable applications, tested: Adobe Reader...

Adobe Album Starter 3.2 - Unchecked Local Buffer Overflow

Exploitable issue in various Adobe products c0ntex [email protected] Scott Laurie February 2008 Vulnerable applications, tested: Adobe Photoshop Album Starter Adobe After Effects CS3 Adobe Photoshop CS3 Not Vulnerable applications, tested: Adobe Reader Adobe Flash Player This bug is related to th...

Cross site scripting

Cross-site scripting XSS vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-1426

SQL injection vulnerability in album.asp in KAPhotoservice allows remote attackers to execute arbitrary SQL commands via the albumid parameter...

Unfixed XSS vulnerability at www.yoyonappy.com

Security researcher SaMTHG, has submitted on 03/09/2008 a cross-site-scripting XSS vulnerability affecting www.yoyonappy.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/09/2008. It is currently...

Minigal 2 critical XSS

Title: Minigal 2 critical XSS Author: Jose Carlos Norte [email protected] Date: 4-3-2008 Severity: high Vendor URL: http://www.minigal.dk/ ------- Introduction Minigal 2a.k.a. MG2 is a picture album written in PHP, it have a simple administration panels, and makes non-ajax browsable albums. -------...

CVE-2008-0939

Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...