1511 matches found
CVE-2008-0939
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...
CVE-2008-0939
The WP Photo Album (WPPA) WordPress plugin (before 1.1) contains multiple SQL injection flaws in wppa.php. The issues arise from unsafely handling the photo parameter (wppa_photo_name) and the album parameter (wppa_album_name) in index.php, allowing remote attackers to execute arbitrary SQL comma...
WordPress WP Photo Album Plugin <= 1.0 - Multiple SQL Injection
Because of these vulnerabilities in wppa.php, the attackers can execute arbitrary SQL commands. Solution Update thne plugin...
wpphoto-sql.txt
WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLOİT...
WordPress album PHOTO SQL Injection
WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLOT...
Wordpress Photo album Remote SQL Injection Vulnerability
No description provided by source. WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLO陌T...
WordPress Plugin Photo album - SQL Injection
WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLOÄ°T...
WordPress Plugin Photo album - SQL Injection
WordPress Plugin Photo album - SQL Injection WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLOÄ°T...
DEBIAN-CVE-2008-0629
Buffer overflow in streamcddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via a CDDB database entry containing a long album title...
CVE-2008-0491
SQL injection vulnerability in fimrss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter...
Sql injection
SQL injection vulnerability in fimrss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter...
CVE-2008-0491
SQL injection vulnerability in fimrss.php in the fGallery 2.4.1 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the album parameter...
PT-2008-2120 · WordPress · Gallery
Name of the Vulnerable Software and Affected Versions: fGallery plugin for WordPress version 2.4.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the album parameter in the fim rss.php file. Recommendations: For version 2.4.1, consider...
cpg1414-sql.txt
table prefix\n"; print " - hostname\n"; print " - web dirname \n"; print " - force mode - '0' - for Off or "album number" for force mode On \n"; print " table prefix - prefix of sql tables\n"; print " example: " . $argv0 . " coppermine.site photo/ 1 cpg1410\n"; credits; / FUNCTIONS / if...
Sql injection
SQL injection vulnerability in Invision Gallery 2.0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in a rate command...
Coppermine Photo Gallery <= 1.4.14 Remote SQL Injection Exploit
No description provided by source. ?php RST/GHC PRIVATE CPG 1.4.10 sql injection exploit Date: 17.05.07 bug: SQL injection in private album function through array indexes with COOKIE errorreporting EERROR; iniset"maxexecutiontime",0; intro; if $argc 4 print " Usage: " . $argv0 . " host dir force...
Coppermine Photo Gallery < 1.4.11 Album Password Cookie SQL Injection
Binary data 4351.prm...
Coppermine Photo Gallery 1.4.10 - SQL Injection
Coppermine Photo Gallery 1.4.10 - SQL Injection table prefix\n"; print " - hostname\n"; print " - web dirname \n"; print " - force mode - '0' - for Off or "album number" for force mode On \n"; print " table prefix - prefix of sql tables\n"; print " example: " . $argv0 . " coppermine.site photo/ 1...
Coppermine Photo Gallery 1.4.10 - 'cpg1410_xek.php' SQL Injection
toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i GLOBALS'host', 80, $errno, $errstr, 30; if!$fp die"- Can't connec...
Cross site scripting
Cross-site scripting XSS vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter...