6693 matches found
CVE-2015-2982
Cross-site scripting XSS vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php...
CVE-2015-2982
Cross-site scripting XSS vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified input to admin.php...
CVE-2015-2983
CVE-2015-2983 concerns a Cross-Site Request Forgery (CSRF) in the admin.php script of PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone (versions 1.0.1 Free and earlier). The vulnerability allows an attacker to hijack the authentication of arbitrary users when they are logged in, by...
CVE-2015-2982
Summary (CVE-2015-2982) : The PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone (Free) versions 1.0.1 and earlier is affected by a cross-site scripting (XSS) vulnerability in the jquery.lightbox-0.5.min.js path, caused by inadequate input filtering in admin.php. A remote authenticat...
CVE-2015-2983
Cross-site request forgery CSRF vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free and earlier allows remote attackers to hijack the authentication of arbitrary users...
Coppermine Photo Gallery Cross-Site Scripting Vulnerability
Coppermine Photo Gallery is a Web-based album management system. The system provides user management , album password access restrictions and automatic generation of thumbnails and other functions . A cross-site scripting vulnerability exists in the installclassic.php script of Coppermine Photo...
Gallery Bank <= 3.0.229 - Authenticated Blind SQL Injection
The WordPress Photo Gallery Plugin by Gallery Bank WordPress plugin was affected by an Authenticated Blind SQL Injection security vulnerability...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in installclassic.php in Coppermine Photo Gallery CPG 1.5.36 allow remote attackers to inject arbitrary web script or HTML via the 1 adminusername, 2 adminpassword, 3 adminemail, 4 dbserver, 5 dbname, 6 dbuser, 7 dbpass, 8 tableprefix, or 9 impath...
CVE-2015-6528
CVE-2015-6528 affects Coppermine Photo Gallery (CPG) 1.5.36. The vulnerability is in install_classic.php and allows remote injection of arbitrary script/HTML (XSS) via any of nine parameters: admin_username, admin_password, admin_email, dbserver, dbname, dbuser, dbpass, table_prefix, or impath. T...
Photo Transfer (2) v1.0 iOS - Denial of Service Vulnerability
Document Title: =============== Photo Transfer 2 v1.0 iOS - Denial of Service Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1580 Release Date: ============= 2015-08-20 Vulnerability Laboratory ID VL-ID: ===================================...
grogono.com XSS vulnerability
Vulnerable URL: http://www.grogono.com/photodisplay.php?PhotoTitle=...
Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery
Overview Photo Gallery CMS for PC, smartphone and feature phone Free provided by PHP Kobo contains a cross-site request forgery CWE-352 vulnerability in admin.php. Yuji Tounai of NTT Com SecurityJapan KK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Informatio...
Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site scripting
Overview Photo Gallery CMS for PC, smartphone and feature phone Free provided by PHP Kobo contains a cross-site scripting CWE-79 vulnerability in admin.php. Yuji Tounai of NTT Com SecurityJapan KK reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
JVN#78240242: Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery
Photo Gallery CMS for PC, smartphone and feature phone Free provided by PHP Kobo contains a cross-site request forgery CWE-352 vulnerability in admin.php. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Software Replace admin.ph...
Coppermine Photo Gallery 1.5.36 Cross Site Scripting
Exploit Title: Coppermine Photo Gallery 1.5.36 Cross Site Scripting + Exploit Author: Ehsan Hosseini + Date: 27/7/2015 + Vendor Homepage: http://coppermine-gallery.net/ + Software Link: http://sourceforge.net/projects/coppermine/files/Coppermine/1.5.x/cpg1.5.36.zip/download + Version: 1.5.36 +...
JVN#69175956: Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site scripting
Photo Gallery CMS for PC, smartphone and feature phone Free provided by PHP Kobo contains a cross-site scripting CWE-79 vulnerability in admin.php. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Replace admin.php with a new version according to...
worldpressphoto.org XSS vulnerability
Vulnerable URL: http://www.worldpressphoto.org/search/images?search='"selection=images Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:48 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 127535 Google...
Google Photo App Uploads Your Images To Cloud, Even After Uninstalling
Have you ever seen any mobile application working in the background silently even after you have uninstalled it completely? I have seen Google Photos app doing the same. Your Android smartphone continues to upload your phone photos to Google servers without your knowledge, even if you have alread...
FreeBSD : roundcube -- multiple vulnerabilities (038a5808-24b3-11e5-b0c8-bf4d8935d4fa)
Roundcube reports : We just published updates to both stable versions 1.0 and 1.1 after fixing many minor bugs and adding some security improvements to the 1.1 release branch. Version 1.0.6 comes with cherry-picked fixes from the more recent version to ensure proper long term support especially i...