1562 matches found
PHP Photo Album < 2.0.14 Multiple Vulnerabilities
Binary data 2821.prm...
phpBB Photo Album Module 2.0.53 - 'Album_Comment.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/13158/info Photo Album is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the brows...
Full Revolution album.asp aspWebAlbum SQL Injection
Binary data 2318.prm...
CVE-2002-1412
CVE-2002-1412 affects Gallery (Gallery project photo album) prior to 1.3.1. Affected component is the GALLERY_BASEDIR handling in the Gallery codebase. The underlying issue allows local and possibly remote attackers to execute arbitrary code by supplying a modified GALLERY_BASEDIR that points to ...
CVE-2002-1412
Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERYBASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script...
GLSA-200406-10 : Gallery: Privilege escalation vulnerability
The remote host is affected by the vulnerability described in GLSA-200406-10 Gallery: Privilege escalation vulnerability There is a vulnerability in the Gallery photo album software which may allow an attacker to gain administrator privileges within Gallery. A Gallery administrator has full acces...
Gallery: Privilege escalation vulnerability
Background Gallery is a web application written in PHP which is used to organize and publish photo albums. It allows multiple users to build and maintain their own albums. It also supports the mirroring of images on other servers. Description There is a vulnerability in the Gallery photo album...
phpBB 2.0.x - 'album_portal.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/10177/info It has been reported that phpBB may be prone to a file include vulnerability that may allow remote attackers to include a remote malicious script to be executed on a vulnerable system...
Advisory !
------------------------------------------------- thePHOTOtool SQL Injection Vulnerability By KingSerb ------------------------------------------------- Please Forgive my spelling or any mistakes i have made, Its my first discovery of a vulnerablity so please understand, and use this file for...
phototool.txt
------------------------------------------------- thePHOTOtool SQL Injection Vulnerability By KingSerb ------------------------------------------------- Please Forgive my spelling or any mistakes i have made, Its my first discovery of a vulnerablity so please understand, and use this file for...
CVE-2003-1239
Directory traversal vulnerability in sendphoto.php in WihPhoto 0.86 allows remote attackers to read arbitrary files via .. specifiers in the album parameter, and the target filename in the pic parameter...
Advisories: CSS in PHP Photo Album by John Beatty ver. 1.0
+-----------------------------+ Advisories: CSS in PHP Photo Album by John Beatty ver. 1.0 Author: nimber [email protected] Date: 4.11.2003 +-----------------------------+ Vendor: John Beatty Version: 1.0 and older versions? +-----------------------------+ Problem: There is a danger of performance...
John Beatty Easy PHP Photo Album 1.0 - dir HTML Injection
John Beatty Easy PHP Photo Album 1.0 - dir HTML Injection source: https://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be...
John Beatty Easy PHP Photo Album 1.0 - 'dir' HTML Injection
source: https://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the 'dir' parameter. This problem is due to...
DSA-355 gallery - cross-site scripting
Bulletin has no description...
CVE-2003-1146
Cross-site scripting XSS vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...
CVE-2002-1412
Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERYBASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script...
bharat Mediratta Gallery 1.11.2 - Directory Traversal
bharat Mediratta Gallery 1.11.2 - Directory Traversal source: https://www.securityfocus.com/bid/3554/info Bharat Mediratta Gallery is a free, open source web-based photo album which may be used as an add-on for the PHPNuke web portal. Due to insufficient validation of user-supplied input, it is b...
CVE-2000-0919
CVE-2000-0919 is a directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier that allows remote attackers to read arbitrary files by prefixing a path with ..%2F..%2F (dot-dot). OpenVAS/Nessus entries confirm the issue with an example payload such as /Album/?mode=album&album=..%2F.....