2332 matches found
Atomic Photo Album 1.0.2 Multiple Vulnerabilities
Exploit for php platform in category web applications ================================================= Atomic Photo Album 1.0.2 Multiple Vulnerabilities ================================================= Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities...
Atomic Photo Album 1.0.2 - Multiple Vulnerabilities
Atomic Photo Album 1.0.2 SQL/XSS Multiple Remote Vulnerabilities http://www.exploit-db.com/exploits/6572/ Found by sh00t0ut Down: http://www.c-point.com/freephpscripts/photoalbum.php Expl SQL: http://victim/photo.php?apaalbumID=2&apaphotoID=-9999 union all select...
OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
OpenJDK AtomicReferenceArray causes SIGSEGV -> SEGV_MAPERR error (6888149)
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
SuSE 11 Security Update : Linux kernel (SAT Patch Number 1086)
The SUSE Linux Enterprise 11 kernel was updated to fix various bugs and several security issues. It was also updated to the stable release 2.6.27.25. The following security issues were fixed : - A local denial of service problem in the splice2 system call was fixed. CVE-2009-1961 - A crash on r81...
kernel: nfs: fix NFS v4 client handling of MAY_EXEC in nfs_permission
The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...
kernel: nfs: fix NFS v4 client handling of MAY_EXEC in nfs_permission
The nfspermission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomicopen is available, does not check execute aka EXEC or MAYEXEC permission bits, which allows local users to bypass permissions and execute files, as demonstrated by file...
CVE-2008-4714
Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...
Authentication flaw
Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...
CVE-2008-4714
Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...
CVE-2008-4714
CVE-2008-4714 affects Atomic Photo Album 1.1.0 pre4, where improper handling of the apa_cookie_login and apa_cookie_password cookies can allow remote attackers to bypass authentication and gain administrative access by modifying cookies. The vulnerability is documented in multiple sources (NVD en...
CVE-2008-4335
SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...
CVE-2008-4336
Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...
Sql injection
SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...
CVE-2008-4336
The CVE-2008-4336 entry concerns Atomic Photo Album (APA) 1.1.0pre4, where a Cross-site Scripting (XSS) flaw exists in album.php. The vulnerability enables remote attackers to inject arbitrary web script or HTML by manipulating the apa_album_ID parameter. The NVD data indicates a medium base_scor...
CVE-2008-4336
Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...
CVE-2008-4335
The CVE-2008-4335 entry relates to Atomic Photo Album (APA) 1.1.0pre4. The vulnerability is a SQL injection in album.php, exploitable via the apa_album_ID parameter, which allows a remote attacker to execute arbitrary SQL commands. The issue arises from improper input handling in the affected scr...