CVE-2017-10680

Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request...

CVE-2017-10680

Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request...

lindseyfamily.com XSS vulnerability

Vulnerable URL: http://www.lindseyfamily.com/photoAlbum/photoAlbum.asp?remember=True=1/-///'/"//--...

prosseracademy.org XSS vulnerability

Vulnerable URL: https://www.prosseracademy.org/m/album/?dir=departments/234714=/m/pages/index.jsp%3FuRECID=234714%26type=d=%22%3Etrolo%3Ci%3Etralala%3Cimg%20src=x%20onerror=prompt/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 04.08.2017 Vulnerability...

CVE-2017-9836

Cross-site scripting XSS vulnerability in Piwigo 2.9.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the virtualname parameter to /admin.php i.e., creating a virtual album...

Cross site scripting

Cross-site scripting XSS vulnerability in Piwigo 2.9.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the virtualname parameter to /admin.php i.e., creating a virtual album...

CVE-2017-9836

Cross-site scripting XSS vulnerability in Piwigo 2.9.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the virtualname parameter to /admin.php i.e., creating a virtual album...

westwoodshorespoa.com XSS vulnerability

Vulnerable URL: http://www.westwoodshorespoa.com/album.asp?albumid=4name=%22%3E%3Cimg%20src=x%20onerror=alert%22openbugbounty%22%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 11.09.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

Album Lock 4.0 Directory Traversal

Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ====================================...

Album Lock 4.0 iOS - Directory Traversal Vulnerability

Exploit for iOS platform in category web applications Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability Product & Service Introduction: =============================== Do you have any secret photo and videos in your iPhone? Album Lock can protect your privacy...

Album Lock v4.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ====================================...

Album Lock v4.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ====================================...

Album Lock 4.0 iOS - Directory Traversal

Album Lock 4.0 iOS - Directory Traversal Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-I...

snbm.org XSS vulnerability

Vulnerable URL: http://www.snbm.org/album/fileview.php?album=2009proletnaprikazka"=dsc02431.jpg Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

stagneshs.org XSS vulnerability

Vulnerable URL: https://www.stagneshs.org/apps/album/index.jsp?dir=departments/79395=--%3E%22%3E%3C/a%3E%3C/script%3E%3C/title%3E%3Csvg/onload=alert/XSSPOSED/%3E!albumRECID=25974=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS...

Design/Logic Flaw

An issue was discovered in Open-Xchange OX App Suite before 7.8.2-rev8. SVG files can be used as mp3 album covers. In case their XML structure contains script code, that code may get executed when calling the related cover URL. Malicious script code can be executed within a user's context. This c...

emlog album plug-in kl_album_ajax_do.php SQL injection vulnerability

Fromhttp://www.leavesongs.com/PENETRATION/emlog-important-plugin-getshell.html Check EM album plug-in source code, 看到klalbumajaxdo.php to: query"INSERT INTO ". DBPREFIX."klalbumtruename, fi...

Imgur: Stored xss in ALBUM DESCRIPTION

Album descriptions that take user generated text typically have strong protections around XSS, however the researcher was able to bypass this protection by adding unsafe text to the description field in a rarely accessed area of the site. This led to a reflected XSS which would trigger as soon as...

jackdesbwa.desbwa.org XSS vulnerability

Vulnerable URL: http://jackdesbwa.desbwa.org/photos/?album=";...

SQL injection vulnerability in BlogManage/Video/MyVideoAlbum.aspx page of Shanghai Hongyu Information Technology Co.

ECS ECS education site system is a general-purpose CMS program developed by Shanghai Hongyu Information Technology Co., Ltd. for schools, education and other site-building system. The product BlogManage/Video/MyVideoAlbum.aspx page SQL injection vulnerability, an attacker registers an account log...