1511 matches found
CVE-2007-1456
PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability, because versions 0.3.2.6 and 0.4.1beta do not contain this file. However, it is possible that th...
CVE-2007-1456
PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows remote attackers to execute arbitrary PHP code via a URL in the dbfile parameter. NOTE: CVE disputes this vulnerability, because versions 0.3.2.6 and 0.4.1beta do not contain this file. However, it is possible that th...
CVE-2007-1456
CVE-2007-1456 – PHP Photo Album (common.php, db_file). A remote file inclusion vulnerability in common.php allows an attacker to supply a URL to db_file to execute arbitrary PHP code. Affected versions were claimed to be pre-0.3.2.6, but the project notes that some builds may not contain common.p...
PT-2007-2850 · Php · Php Photo Album
Name of the Vulnerable Software and Affected Versions: PHP Photo Album versions prior to 0.3.2.6 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the db file parameter in the common.php file. It is noted that versions 0.3.2.6 and 0.4.1beta do not contain...
Remote File Include In Script PHP Photo Album
By Hasadya Raed Contact : [email protected] ------------------------------------------------------------------------------------- Script : PHP Photo Album Dork : "Powered by PHP Photo Album" ------------------------------------------------------------------------------------- B.File : common.php...
CVE-2007-1026
SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the album parameter in view mode. NOTE: some of these details are obtained from third party information...
XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
Critical Status:High Found By: 0x90 Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends confkey-Password confvalue-Username Table:config http://host.com/path/?mode=view&album=-120UNION20SELECT20confkey20FROM20config/...
XLAtunes 0.1 - album SQL Injection
XLAtunes 0.1 - album SQL Injection Critical Status:High Found By:Bl0od3r Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends fuckz:Donh4cky0u for steeling hacks of others,for his 100% noobility,for his noobass.DON your an idiot.fucka. - confkey-Password...
XLAtunes 0.1 - 'album' SQL Injection
Critical Status:High Found By:Bl0od3r Download:http://www.scriptdungeon.com/script.php?ScriptID=2844 Greetz:all my friends fuckz:Donh4cky0u for steeling hacks of others,for his 100% noobility,for his noobass.DON your an idiot.fucka. - confkey-Password confvalue-Username Table:config...
WebMatic Index_Album.PHP Remote File Include Vulnerabilitie
WebMatic是一款基于PHP的WEB应用程序。 WebMatic不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'IndexAlbum.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Valarsoft WebMatic 2.6 目前没有解决方案提供： http://www.valarsoft.com/ http://www.example.com/core/index/indexalbum.php?PLIB=Shell...
DEBIAN-CVE-2006-6980
The magnatune.com album browser in Amarok allows attackers to cause a denial of service application crash via unspecified vectors...
CVE-2006-6980
Technical details about CVE-2006-6980 are not publicly available in the provided documents. Monitor for updates.
CVE-2006-6980
The magnatune.com album browser in Amarok allows attackers to cause a denial of service application crash via unspecified vectors...
phpAlbum <= v0.4.1 Beta6 Remote Code Execution Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
CVE-2006-5803
PHP remote file inclusion vulnerability in modules/mxsmartor/album.php in the mxBB Smartor Album module 1.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...
CVE-2006-5803
CVE-2006-5803 affects the mxBB Smartor Album module (mxBB Smartor Album) version 1.02 and earlier. The vulnerability is a PHP remote file inclusion in modules/mx_smartor/album.php triggered by the module_root_path parameter, allowing an attacker to execute arbitrary PHP code on the affected syste...
уязвимости Simple Photo Album - 1.2 и 2.5
Software: Simple Photo Album - 1.2 и 2.5 Vendor: www.gieson.com Vulnerability: получение удаленным пользователем файла с хешем администратора Simple Photo Album в 1.2 и 2.5, возможность редактирования фотоальбома в обход авторизации, загрузка произвольных файлов - версия 1.2. Risk: высокий Date:...
MX Smartor Album Module Remote File Include
MX Smartor Album Module Remote File Include Discovered by Paul Bakoyiannis winsec ------------------------------------------------- Vulnerable Code: if $mode == 'albumcat' include$modulerootpath. 'includes/albumcat.'.$phpEx; the rest of the vulnerable code removed for brevity Vulnerability:...
Imageview 5 - '/Cookie/index.php' Local/Remote File Inclusion
!/usr/bin/php -q -d shortopentag=on ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...