CVE-2003-1146

Cross-site scripting XSS vulnerability in John Beatty Easy PHP Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

EUVD-2003-1136

Malware in sbrugna...

EUVD-2008-6465

Malware in sbrugna...

EUVD-2009-0427

Malware in sbrugna...

PHP Photo Album <= 0.4.1.16 - Multiple Disclosure Vulnerabilities

No description provided by source. ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple Disclosure...

John Beatty Easy PHP Photo Album 1.0 dir Parameter HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the 'dir'...

Maxs PHP Photo Album 1.0 - id Local File Inclusion

Maxs PHP Photo Album 1.0 - id Local File Inclusion source: https://www.securityfocus.com/bid/52474/info Max's PHP Photo Album is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and...

Max's PHP Photo Album 1.0 - 'id' Local File Inclusion

source: https://www.securityfocus.com/bid/52474/info Max's PHP Photo Album is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserv...

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16...

PHP Photo Album 0.4.1.16 - Multiple Disclosure Vulnerabilities

---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities Google Dork:...

PHP Photo Album 0.4.1.16 Cross Site Scripting / Disclosure

---------------------------------------------------------------- PHP Photo Album Poc 2 http://localhost/phpAlbum/main.php?cmd=albumnew&keyword=XSS Demo :http://www.iloveazucar.com/phpAlbum/main.php?cmd=albumnew&keyword="onmouseover%3dprompt975554 bad%3d" Demo :http://www.dolfpretorius.com/main.ph...

PHP Photo Album <= (0.4.1.16) Multiple Disclosure Vulnerabilities

Exploit for php platform in category web applications ---------------------------------------------------------------- PHP Photo Album = 0.4.1.16 Multiple Disclosure Vulnerabilities ---------------------------------------------------------------- Exploit Title: PHP Photo Album = 0.4.1.16 Multiple...

Max's PHP Photo Album 2008-04-01 Cross Site Scripting

Vulnerability ID: HTB22953 Reference: http://www.htbridge.ch/advisory/xssinmaxsphpphotoalbum.html Product: Max's PHP Photo Album Vendor: http://www.phpf1.com http://www.phpf1.com Vulnerable Version: 2008-04-01 Vendor Notification: 12 April 2011 Vulnerability Type: XSS Cross Site Scripting Risk...

Cross-site Scripting (XSS) Vulnerability in Max's PHP Photo Album

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Max's PHP Photo Album which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Max's PHP Photo Album The vulnerability exists due to input sanitation error in the "id"...

TinyWebGallery 1.8.3 version multiple vulnerabilities-vulnerability warning-the black bar safety net

TinyWebGallery is a php photo album program, TinyWebGallery 1.8.3 contains multiple security vulnerabilities, including directory traversal andXSS, may lead to sensitive information disclosure. +info: Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home:...

CVE-2008-6515: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Fritz Berger yet another php photo album - next generation yappa-ng allows remote attackers to inject arbitrary web script or HTML via the query string to the default URI...

CVE-2008-6495: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter...

Directory traversal

Directory traversal vulnerability in index.php in Php Photo Album PHPPA 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the preview parameter...

CVE-2009-0423

Directory traversal vulnerability in index.php in Php Photo Album PHPPA 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the preview parameter...

CVE-2009-0423: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Php Photo Album PHPPA 0.8 BETA allows remote attackers to include and execute arbitrary local files via a .. dot dot in the preview parameter...