602 matches found
Coppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php ?php if$argc 4 print "\n---------------------------------------------------------"; print "\nAffected.scr..: Coppermine Photo Gallery = 1.4.10"; print "\nPoc.ID........: 19070104"; print "\nType..........: SQL Injection"; print "\nRisk.level....:...
Coppermine Photo Gallery 1.4.11 - SQL Injection
source: https://www.securityfocus.com/bid/21894/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Coppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== Coppermine Photo Gallery "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print...
Coppermine Photo Gallery 1.4.11 - SQL Injection
Coppermine Photo Gallery 1.4.11 - SQL Injection source: https://www.securityfocus.com/bid/21894/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit cou...
Coppermine Photo Gallery 1.4.10 - 'xpl.php' SQL Injection
!/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = root 3 = toor 4 = localhost:8200 5 = user:passwd //...
Coppermine Photo Gallery 1.4.10 - xpl.php SQL Injection
Coppermine Photo Gallery 1.4.10 - xpl.php SQL Injection !/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = roo...
CVE-2006-6864
Technical details about CVE-2006-6864 are not publicly available in the provided documents. Monitor for updates in connected sources for affected product/version, impact, and remediation information.
CVE-2006-6864
PHP remote file inclusion vulnerability in E2header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter...
Enigma Coppermine Bridge E2_Header.Inc.PHP远程文件包含漏洞
Enigma WordPress Bridge是一款基于PHP的WEB应用程序。 Enigma WordPress Bridge不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'E2Header.Inc.PHP'脚本对用户提交的'boarddir'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Enigma WordPress Bridge 目前没有解决方案提供： http://www.lunabyte.org/index.php?module=Downloads;catd=4...
CVE-2006-6864: Undefined Security Weakness
PHP remote file inclusion vulnerability in E2header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter...
enigma-rfi.txt
----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...
CVE-2006-6864
PHP remote file inclusion vulnerability in E2header.inc.php in Enigma2 Coppermine Bridge 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter...
Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability
No description provided by source. ----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir...
Enigma Coppermine Bridge (boarddir) Remote File Include
----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...
Enigma 2 Coppermine Bridge - 'boarddir' Remote File Inclusion
----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code: requireonce$boarddir . '/PortalSources/Portal.ini.php';...
Enigma 2 Coppermine Bridge (boarddir) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Enigma 2 Coppermine Bridge boarddir Remote File Include Vulnerability =======================================================================...
Enigma 2 Coppermine Bridge - boarddir Remote File Inclusion
Enigma 2 Coppermine Bridge - boarddir Remote File Inclusion ----------------------------------------------- Enigma Coppermine Bridge boarddir Remote File Include ----------------------------------------------- Author: xoron ----------------------------------------------- Vuln Code:...
Coppermine Photo Gallery Theme.PHP远程文件包含漏洞
Coppermine Photo Gallery是一款基于PHP的图片管理程序。 Coppermine Photo Gallery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'theme.php'脚本对用户提交的"THEMEDIR"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Coppermine Photo Gallery 1.2.2 b-Nuke http://coppermine-gallery.net/index.php...
CVE-2006-6123
Coppermine Photo Gallery CPG 1.4.8 stable, with registerglobals enabled, allows remote attackers to bypass XSS protection and set arbitrary variables via a query string that causes the variable to be defined in global space, with separate GET, REQUEST, or other critical parameters, which are unse...
CVE-2006-6123
CVE-2006-6123 affects Coppermine Photo Gallery (CPG) 1.4.8 stable. With register_globals enabled, a crafted query string can cause variables to be defined in the global space, bypassing XSS protection and allowing remote attackers to set arbitrary variables via separate _GET, _REQUEST, or other p...