1511 matches found
CVE-2006-5320
Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter...
CVE-2006-5320
Summary: Affected software: Album Photo Sans Nom 1.6. Vulnerable component: getimg.php. Root cause: directory traversal via the img parameter, enabling remote attackers to read arbitrary files. Impact: confidentiality risk (read access). No remediation details are provided in the supplied documen...
phpIncludes.txt
Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...
7 php scripts File Inclusion / Source disclosure Vuln
Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...
CVE-2006-5206
SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in 1 index.php and 2 forum/index.php, when the rate command in the gallery automodule is used...
Album Photo Sans Nom 1.6 - Remote Source Disclosure
Album Photo Sans Nom 1.6 - Remote Source Disclosure Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational...
Album Photo Sans Nom <= 1.6 Remote Source Disclosure Vulnerability
No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...
Album Photo Sans Nom <= 1.6 Remote Source Disclosure Vulnerability
Exploit for unknown platform in category web applications ================================================================== Album Photo Sans Nom = 1.6 Remote Source Disclosure Vulnerability ================================================================== Title..: 7 php scripts File Inclusion...
Album Photo Sans Nom 1.6 - Getimg.php Remote File Inclusion
Album Photo Sans Nom 1.6 - Getimg.php Remote File Inclusion source: https://www.securityfocus.com/bid/20441/info Album Photo Sans Nom is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...
Album Photo Sans Nom 1.6 - Remote Source Disclosure
Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You can use regex in your research, th...
CVE-2006-4754
Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...
CVE-2006-4754
Cross-site scripting XSS vulnerability in index.php in PHProg before 1.1 allows remote attackers to inject arbitrary web script or HTML via the album parameter, which is used in an opendir call. NOTE: the same primary issue can be used for full path disclosure with an invalid parameter that revea...
PHProg.txt
------=Part387718013116.1157965429026 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline 11/09/06 Produit vuln=E9rable : PHProg Album photo en PHP Site officiel du produit : http://www.PHProg.com/ Failles de...
PT-2006-5529 · Phprog · Phprog
Name of the Vulnerable Software and Affected Versions: PHProg versions prior to 1.1 Description: The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the album parameter in index.php, which is us...
[Full-disclosure] PHProg : Local File Inclusion + XSS + Full path disclosure
11/09/06 Produit vulnerable : PHProg Album photo en PHP Site officiel du produit : http://www.PHProg.com/ Failles de securite decelees : 1 Full path disclosure : http://localhost/PHProg/?id=1&album=cdg393 2 Cross Site Scripting XSS : http://localhost/PHProg/?id=1&album= scriptalert'cdg393'/script...
libtunepimp library buffer overflow
LookupTRM::lookup oversized album release date buffer overflow...
CVE-2006-3020
Multiple cross-site scripting XSS vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 image and 2 PublisedDate parameters...
CVE-2006-3020
CVE-2006-3020 concerns WS-Album 1.1 and earlier, where the vulnerability is in FullPhoto.asp. The two parameters, image and PublisedDate , can be exploited to inject arbitrary web script or HTML via reflected/stored XSS as described in the CVE entry. The affected software is WS-Album (FullPhoto.a...
multiple Xss exploits in 35mmslidegallery V6
multiple Xss exploits in 35mmslidegallery V6 forum type : 35mmslidegallery V6 bug found by : black-code team : $!T3-D0WN type : Xss exploits : http://example.com/lumet/album/index.php?imgdir='scriptalert10/script http://example.comr/lumet/album/popup.php?w='scriptalert10/script...
SelectaPix System SQL Injection
SelectaPix System SQL Injection Vulnerabilities SpC-x Credit : SpC-X Site : http://www.Cyber-security.org Code : http://www.site.com/path/viewalbum.php?albumID=SQL Example : http://www.outofthetrees.co.uk/selectapix/demo/viewalbum.php?albumID=SQL /SpC-x -- Get your free email from...