1511 matches found
White Album 2.5 - 'Pictures.php' SQL Injection
source: https://www.securityfocus.com/bid/16247/info White Album is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
White Album 2.5 - Pictures.php SQL Injection
White Album 2.5 - Pictures.php SQL Injection source: https://www.securityfocus.com/bid/16247/info White Album is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
CVE-2005-4201
Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via ".../" triple dot sequences in unspecified vectors...
CVE-2005-4201
Directory traversal vulnerability in My Album Online 1.0 allows remote attackers to access arbitrary files via ".../" triple dot sequences in unspecified vectors...
CVE-2005-4201
CVE-2005-4201 describes a directory traversal vulnerability in My Album Online 1.0, exploitable remotely via triple dot sequences (".../") in unspecified vectors. According to the NVD entry, it is a network-accepting issue with low attack complexity, no authentication, and partial confidentiality...
Gallery 2.x Security Advisory
Gallery is an open source web based photo album organizer. The 2.x is a newly released complete rewrite of the application. Url: http://gallery.menalto.com Contact: [email protected] An internal security audit turned up 3 separate vulnerabilities. These are all resolved in Gallery 2.0.2, releas...
CVE-2003-1239
Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parameter...
CVE-2005-2413
PHP remote file inclusion vulnerability in apaphpinclude.inc.php in Atomic Photo Album APA allows remote attackers to execute arbitrary PHP code via the apamodulebasedir parameter...
CVE-2005-2413
PHP remote file inclusion vulnerability in apaphpinclude.inc.php in Atomic Photo Album APA allows remote attackers to execute arbitrary PHP code via the apamodulebasedir parameter...
CVE-2005-2413
The CVE-2005-2413 entry maps to a concrete vulnerability in Atomic Photo Album (APA). The flaw is a PHP remote file inclusion in apa_phpinclude.inc.php triggered via the apa_module_basedir parameter, allowing an attacker to execute arbitrary PHP code and potentially view arbitrary files on the re...
apa-include.txt
Atomic Photo Album APA apaphpinclude.inc.php remote file include : ------------------------------------------------------------ Name: Atomic Photo Album APA Version: all Homepage: http://atomicpa.sourceforge.net/ Author: pclabs / lwdz - RandomHero Date: 20 July 2005...
Atomic Photo Album 0.x/1.0 - 'Apa_PHPInclude.INC.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/14368/info Atomic Photo Album is susceptible to a remote PHP file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitrary PHP code on an...
Atomic Photo Album apa_phpinclude.inc.php apa_module_basedir Parameter Remote File Inclusion
The remote host is running Atomic Photo Album, a free, PHP-based photo gallery. The installed version of Atomic Photo Album allows remote attackers to control the 'apamodulebasedir' variable used when including PHP code in the 'apaphpinclude.inc.php' script. By leveraging this flaw, an attacker m...
Atomic Photo Album (APA) apa_phpinclude.inc.php remote file include
Atomic Photo Album APA apaphpinclude.inc.php remote file include : ------------------------------------------------------------ Name: Atomic Photo Album APA Version: all Homepage: http://atomicpa.sourceforge.net/ Author: pclabs / lwdz - RandomHero Date: 20 July 2005...
Atomic Photo Album apa_phpinclude.inc.php apa_module_basedir Parameter Remote File Inclusion
Binary data 3111.prm...
CVE-2005-1947
Cross-site request forgery CSRF vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the 1 albums or 2 delimg actions...
CVE-2003-1146
Cross-site scripting XSS vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...
CVE-2004-1871
PhotoPost PHP Pro 4.6.x and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. Exploitation targets showmembers.php via the parameters ppuser, password, stype, perpage, sort, page, si, cat, and also the photo/album name/description fields. Affected product/version: Photo...
CVE-2003-1146
The CVE describes a cross-site scripting (XSS) vulnerability in John Beatty Easy PHP Photo Album 1.0, exploitable via the dir parameter to inject arbitrary script/HTML. Multiple sources (NVD, Red Hat, CVE List) confirm the issue and its description. No explicit exploitation details, vectors beyon...