Coppermine Photo Gallery 1.4.9 - Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/php ?php / Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability Note: Requires a valid user account. Usage: php script.php host path table prefix user id username password Usage Example: php script.php domain.com /coppermine/ cpg149 1 john...

Magic Photo Storage Website admin/delete_member.php _config[site_path] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

Magic Photo Storage Website user/delete_category.php _config[site_path] Parameter Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

Max's Photo Album Shell Upload Vulnerability

No description provided by source...

SIESTTA 2.0 (LFI/XSS) Multiple Vulnerabilities

No description provided by source. SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! Thi...

Album Photo Sans Nom <= 1.6 - Remote Source Disclosure Vulnerability

No description provided by source. Title..: 7 php scripts File Inclusion Vuln / Source disclosure Credits: DarkFig Og.link: http://acid-root.new.fr/poc/13061007.txt Using http://www.google.com/codesearch Few examples about what we can do with a code search engine For educational purpose only. You...

Photo Galerie Standard <= 1.1 (view.php) SQL Injection Vulnerability

No description provided by source. Title : Photo Galerie Standard = 1.1 view.php Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://noname-media.com $$ : Free SQL--------------------------------------------------------- http://target/path//view.php?id=SQL Example:...

Photo Transfer Upload 1.0 iOS - Multiple Vulnerabilities

No description provided by source...

Free PHP photo gallery script Remote File inclusion Vulnerability

No description provided by source...

Wordpress Plugin Photo Album Plus <= 4.1.1 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WP Photo Album Plus = 4.1.1 SQL Injection Vulnerability Date: 2011-10-14 Author: Skraps jackie.craig.sparksatlive.com jackie.craig.sparksatgmail.com @skrapsfoo Plugin Page: http://wordpress.org/extend/plugins/wp-photo-album-plus/ Software Link:...

Snipe Photo Gallery - Bypass Remote Upload Vulnerability

No description provided by source...

Free PHP photo gallery script Remote Command Execution Vulnerability

Exploit Title: Free PHP photo gallery script Remote Command Execution Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested o...

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4649

Piwigo contains a SQL injection vulnerability (CVE-2014-4649) in the photo-edit subsystem for versions 2.6.x and 2.7.x prior to 2.7.0beta2. The issue allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field. Affected software is Piwigo, with the root ...

WordPress Flash Photo Gallery Plugin <= 0.7 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "path" parameter. Solution Update the plugin...

CVE-2013-5760

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php...

Cross site request forgery (csrf)

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php...

CVE-2013-5760

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php...

CVE-2013-5760

CVE-2013-5760 affects QNAP Photo Station prior to firmware 4.0.3 build0912, where an request to photo/p/api/list.php allows remote attackers to enumerate OS user accounts. The description in the public records specifies an information-disclosure vulnerability (partial confidentiality) without det...

Photo Organizer CMS - XSS and SQL Vulnerabilities

Photo Organizer is an image gallery CMS vulnerable to XSS & SQL injections 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 0 0 1 /\ \ /\ \ /\ \ 1 0 \ \ /\ \ /\ \ \ /'\ \ \ /\ \ 0 1 \ \ \ \ \ /'\ /\ \ /',/\ /\ \ \ , /'\ \ \ \ \ \ /'\ /' \ 1 0 \ ...