Piwigo 2.8.2 / 2.9.2 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications Document Title: =============== Piwigo v2.8.2 & 2.9.2 CMS - Multiple Cross Site Vulnerabilities Vulnerability Class: ==================== Cross Site Scripting - Non Persistent Current Estimated Price: ======================== 500a! - 1.000a!...

Photos in Wifi application for iOS image and video upload module directory traversal vulnerability

Photos in Wifi application for iOS is a LAN photo sharing application based on iOS platform.Select a photo or a video to upload moudle is one of the photo and video uploading modules. A directory traversal vulnerability exists in the photo and video upload module in version 1.0.1 of the Photos in...

Synology Photostation 6.7.2-3429 - Multiple Vulnerabilities

Synology Photostation 6.7.2-3429 - Multiple Vulnerabilities Synology Photostation Multiple Vulnerabilities Vendor: Synology Product: Synology Photostation Version: = 6.7.2-3429 Website: http://www.synology.com / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// //...

digital-photo-secrets.com XSS vulnerability

Open Bug Bounty ID: OBB-477846 Description| Value ---|--- Affected Website:| digital-photo-secrets.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

Photo Fusion 1.0 Cross Site Scripting

Exploit Title: Photo Fusion - Free Stock Photos Script - Xss Google Dork: N/A Date: 2017/31/12 Exploit Author: ShanoWeb Author Mail : MrdotNet2NetatGmaildotcom Vendor Homepage: https://codecanyon.net/user/teamworktec Software Buy:...

Synology Photo Station Cross-Site Scripting Vulnerability (CNVD-2018-01382)

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site scripting vulnerability exists in the PixlrEditorHandler.php file in Synology Photo Station versions prior to 6.8.0-3456. A remote attacker can exploit the vulnerability to inject...

Synology Photo Station Cross-Site Scripting Vulnerability (Synology_SA_17_80)

Synology Photo Station is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

CVE-2017-12072

Synology Photo Station is affected by a Cross-Site Scripting (XSS) vulnerability in PixlrEditorHandler.php. The issue allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter in versions earlier than 6.8.0-3456. Root cause: improper handling of the id paramet...

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

[SECURITY] Fedora 26 Update: LibRaw-0.18.6-1.fc26

LibRaw is a library for reading RAW files obtained from digital photo cameras CRW/CR2, NEF, RAF, DNG, and others. LibRaw is based on the source codes of the dcraw utility, where part of drawbacks have already been eliminated and part will be fixed in future...

SRC-2018-0005 : Synology Photo Station LogList Stored Cross Site Scripting Authentication Bypass Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Synology Photo Station. User interaction is not required to exploit this vulnerability. The specific flaw exists when parsing html characters in the LogList function. The issu...

SRC-2018-0006 : Synology Photo Station SYNOPHOTO_Flickr_MultiUpload Race Condition File Write Remote Code Execution Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Synology Photo Station. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists...

Synology Photo Station Arbitrary File Acquisition Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A security vulnerability exists in the picasa.php file in Synology Photo Station versions prior to 6.8.1-3458 and prior to 6.3-2970. A remote attacker can exploit the vulnerability to obtain...

Synology Photo Station Information Disclosure Vulnerability (CNVD-2018-00112)

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. An information disclosure vulnerability exists in the default HTTP configuration file in Synology Photo Station versions prior to 6.8.1-3458 and prior to 6.3-2970. A remote attacker can exploit...

Xxe

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via progid field...

CVE-2017-12079

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via progid field...

Information disclosure

An information exposure vulnerability in default HTTP configuration file in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain sensitive system information via .htaccess file...