26 matches found
Design/Logic Flaw
downloadscript.asp in ASP Folder Gallery allows remote attackers to read arbitrary files via a filename in the file parameter...
CVE-2007-2715
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the 1 username, or the 2 password and password2 parameters in an edit action...
Snaps! Gallery 1.4.4 Remote User Pass Change Exploit
Exploit for unknown platform in category web applications ==================================================== Snaps! Gallery 1.4.4 Remote User Pass Change Exploit ==================================================== ?php / \|/// \ - - // @ @...
Coppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php ?php if$argc 4 print "\n---------------------------------------------------------"; print "\nAffected.scr..: Coppermine Photo Gallery = 1.4.10"; print "\nPoc.ID........: 19070104"; print "\nType..........: SQL Injection"; print "\nRisk.level....:...
EUVD-2006-1223
Directory traversal vulnerability in Gallery 2.0.3 and earlier, and 2.1 before RC-2a, allows remote attackers to include arbitrary PHP files via ".." dot dot sequences in the stepOrder parameter to 1 upgrade/index.php or 2 install/index.php...