Enigma 2 Coppermine Bridge - 'boarddir' Remote File Inclusion

----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...

Enigma 2 Coppermine Bridge - boarddir Remote File Inclusion

Enigma 2 Coppermine Bridge - boarddir Remote File Inclusion ----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...

Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Enigma 2 Coppermine Bridge boarddir Remote File Include Vulnerability =======================================================================...

Coppermine Photo Gallery Theme.PHP远程文件包含漏洞

Coppermine Photo Gallery是一款基于PHP的图片管理程序。 Coppermine Photo Gallery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'theme.php'脚本对用户提交的"THEMEDIR"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Coppermine Photo Gallery 1.2.2 b-Nuke http://coppermine-gallery.net/index.php...

CVE-2006-6123

Coppermine Photo Gallery CPG 1.4.8 stable, with registerglobals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate GET, REQUEST, or other critical parameters, which are unse...

CVE-2006-6123

CVE-2006-6123 affects Coppermine Photo Gallery (CPG) 1.4.8 stable. With register_globals enabled, a crafted query string can cause variables to be defined in the global space, bypassing XSS protection and allowing remote attackers to set arbitrary variables via separate _GET, _REQUEST, or other p...

CVE-2006-6123

Coppermine Photo Gallery CPG 1.4.8 stable, with registerglobals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate GET, REQUEST, or other critical parameters, which are unse...

CVE-2006-5622

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2006-5622

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2006-5622

CVE-2006-5622 affects Coppermine Photo Gallery 1.4.9, where SQL injection is possible in picmgr.php via the aid parameter. This could allow remote attackers to execute arbitrary SQL commands. The provided documents do not specify a fixed version patch or remediation, and exploitation details are ...

[Full-disclosure] Coppermine 1.4.9 SQL injection

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Coppermine 1.4.9 http://coppermine-gallery.net/ VULNERABILITY: SQL Injection NOTES: - SQL injection can be used to obtain password hash - You must be a registered user to access the vulnerable page, picmgr.php. - The table prefix must be know...

Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/php ?php / Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability Note: Requires a valid user account. Usage: php script.php host path table prefix user id username password Usage Example: php script.php domain.com /coppermine/ cpg149 1 john...

Coppermine1.4.9.txt

// http://www.w4cking.com CREDIT: w4ck1ng.com PRODUCT: Coppermine 1.4.9 http://coppermine-gallery.net/ VULNERABILITY: SQL Injection NOTES: - SQL injection can be used to obtain password hash - You must be a registered user to access the vulnerable page, picmgr.php. - The table prefix must be know...

Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability ================================================================= !/usr/bin/php ?php / Coppermine Photo...

Coppermine Photo Gallery 1.4.9 - SQL Injection

!/usr/bin/php ?php / Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability Note: Requires a valid user account. Usage: php script.php host path table prefix user id username password Usage Example: php script.php domain.com /coppermine/ cpg149 1 john secret Googledork" "Powered by...

Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Coppermine Photo Gallery = 1.2.2b Nuke Addon Include Vulnerability =====================================================================...

Coppermine Photo Gallery 1.2.2b (Nuke Addon) - Remote File Inclusion

Coppermine Photo Gallery 1.2.2b Nuke Addon - Remote File Inclusion ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for...

Coppermine Photo Gallery &lt;= 1.2.2b (Nuke Addon) Include Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for PHPNUKE THEMEDIR Remote File...

Coppermine Photo Gallery 1.2.2b (Nuke Addon) - Remote File Inclusion

----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for PHPNUKE THEMEDIR Remote File Include Vulnerability...

CVE-2006-4321

PHP remote file inclusion vulnerability in cpg.php in the Coppermine Photo Gallery component comcpg 1.0 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...