1511 matches found
CVE-2006-2680
Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...
CVE-2006-2680
Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...
CVE-2006-2680
CVE-2006-2680 affects the AZ Photo Album Script Pro. The vulnerability is a cross-site scripting (XSS) flaw in the index.php file that allows remote attackers to inject arbitrary web script or HTML via the bad parameter name gazpart. The provided data indicates no explicit exploit code or in-the-...
AZ Photo Album Script Pro
AZ Photo Album Script Pro Homepage: http://www.php4script.com/php-photo-album-script/ Description: A powerful PHP/MySQL photo album photo gallery script with a lot of features. Effected files: index.php Exploits & Vulns: Captivate is prone to a cross-site scripting vulnerability. This issue is du...
CVE-2006-2202
SQL injection vulnerability in post.php in Invision Gallery 2.0.6 allows remote attackers to execute arbitrary SQL commands via the album parameter...
CVE-2006-2187
Multiple cross-site scripting XSS vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 a parameter in i.php, and the 2 album and 3 image parameters in index.php...
[Full-disclosure] [XPA] - Albinator Pro <= 2.0.8 - Remote Command Execution Vulnerability
=========================================================================== XOR Crew :: Security Advisory 0day GIVE AWAY date? 2/20/2006 =========================================================================== Albinator Pro = 2.0.8 - Remote Command Execution Vulnerability...
CVE-2006-1839
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the datadir parameter, which satisfies the fileexists function call...
Remote file inclusion
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the datadir parameter, which satisfies the fileexists function call...
CVE-2006-1839
PHP remote file inclusion vulnerability in language.php in PHP Album 0.3.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary code via an FTP URL in the datadir parameter, which satisfies the fileexists function call...
PHP Album 0.3.2.3 - Remote Command Execution
PHP Album 0.3.2.3 - Remote Command Execution !/usr/bin/php -q -d shortopentag=on this works with magicquotesgpc=Off & registerglobals=On\r\n"; echo "dork: "powered by php photo album" -demo2 -pitanje\r\n\r\n"; if $argc "next", "IDPREV" = "previous", "IDNEXTPAGE" = "next page", "IDPREVPAGE" =...
PHP Album <= 0.3.2.3 Remote Command Execution Exploit
Exploit for unknown platform in category web applications ===================================================== PHP Album this works with magicquotesgpc=Off & registerglobals=On\r\n"; echo "dork: "powered by php photo album" -demo2 -pitanje\r\n\r\n"; if $argc "next", "IDPREV" = "previous",...
PHP Album <= 0.3.2.3 Remote Command Execution Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "PHP Album = 0.3.2.3 remote cmmnds xctn\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "- this works with magicquotesgpc=Off & registerglobals=On\r\n"; echo "dork:...
PHP Album 0.3.2.3 - Remote Command Execution
!/usr/bin/php -q -d shortopentag=on this works with magicquotesgpc=Off & registerglobals=On\r\n"; echo "dork: "powered by php photo album" -demo2 -pitanje\r\n\r\n"; if $argc "next", "IDPREV" = "previous", "IDNEXTPAGE" = "next page", "IDPREVPAGE" = "previous page", "IDALBUMNAME" = "Photoalbum",...
CVE-2006-1127
Cross-site scripting XSS vulnerability in Gallery 2 up to 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the X-Forwarded-For XFORWARDEDFOR HTTP header, which is not properly handled when adding a comment to an album...
Code injection
Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file...
CVE-2006-0587
Unspecified vulnerability in util.php in Gallery before 1.5.2-pl2 allows remote authenticated users with trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafted file...
PT-2006-1648 · Gallery · Gallery
Name of the Vulnerable Software and Affected Versions: Gallery versions prior to 1.5.2-pl2 Description: The issue allows remote authenticated users to trick an owner into modifying stored album data and possibly executing arbitrary code via unspecified vectors involving a crafted link to a crafte...
whitealbum.txt
WHITEAlbum Sql Ýnjection Website:http://whiteangle.com/ ------------------------------------------------------------------- exploit : http://victim/folder/pictures.php?dir=SQL ------------------------------------------------------------------- Credit:Liz0ziM mail:[email protected]...
WHITEAlbum Sql Injection
WHITEAlbum Sql Injection Website:http://whiteangle.com/ ------------------------------------------------------------------- exploit : http://victim/folder/pictures.php?dir=SQL ------------------------------------------------------------------- Credit:Liz0ziM mail:[email protected]...