527 matches found
cpg_143_incl_xpl
this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect lead on to each other in turn. It is like moving in a...
Dragonfly CMS 9.0.6.1 Coppermine Module - 'album' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16784/info Dragonfly is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in...
Coppermine Gallery < 1.4.4 Script Injection
Binary data 3436.prm...
Coppermine Photo Gallery <=1.4.3 remote code execution
Coppermine Photo Gallery = 1.4.3 arbitrary local/remote inclusion: --------- - 18/02/2006 5.09.55 ----------------------------------------------------------- -------------------------------------------------------------------------------- software: site: http://coppermine-gallery.net/index.php...
coppermine -- File Inclusion Vulnerabilities
Secunia reports: Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious people and by malicious users to compromise a vulnerable system. 1 Input passed to the "lang" parameter in include/init.inc.php isn't properly verified, before it is used to include files. This can...
Coppermine Photo Gallery 1.4.3 - Remote Command Execution
Coppermine Photo Gallery 1.4.3 - Remote Command Execution this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect...
Coppermine Photo Gallery 1.4.3 - Remote Command Execution
this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect lead on to each other in turn. It is like moving in a...
Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
Exploit for unknown platform in category web applications =================================================================== Coppermine Photo Gallery this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage:...
Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
No description provided by source. ?php ---cpg143inclxpl.php 15.38 04/12/2005 Coppermine Photo Gallery = 1.4.3 remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of any php.ini settings, you need a normal user account with upload rights in persona...
CVE-2005-3979
CVE-2005-3979 affects Coppermine Photo Gallery (CPG) versions 1.4.2 and 1.4 beta. The file relocate_server.php is not removed after installation and does not require authentication, enabling remote attackers to obtain sensitive information (e.g., database configuration) via a direct request. The ...
CVE-2005-3979
relocateserver.php in Coppermine Photo Gallery CPG 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request...
[SA17855] Coppermine Photo Gallery "relocate_server.php" Exposure of Configuration
TITLE: Coppermine Photo Gallery "relocateserver.php" Exposure of Configuration SECUNIA ADVISORY ID: SA17855 VERIFY ADVISORY: http://secunia.com/advisories/17855/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Coppermine Photo Gallery 1.x...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Coppermine Photo Gallery By DiGiTALMiDWAY import urllib2, sys from urllib import urlencode import zipfile iflensys.argv2: print 'usage : %s http://host/Path/...
Coppermine Photo Gallery 1.3.2 - File Retrieval / SQL Injection
tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good cookie : By DiGiTALMiDWAY import...
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
No description provided by source. tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good...
Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities
Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities Summary : A large majority of PHP Images Gallery Technologies now handle the Exchangeable Image File EXIF header of jpeg files. The Exchangeable Image File EXIF format is an international specification that lets imaging companies...
Coppermine Photo Gallery EXIF Data XSS
According to its banner, the version of Coppermine Gallery installed on the remote host is prone to cross-site scripting attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML...
