SimpleTransfer 2.2.1 - Command Injection Vulnerabilities

Document Title: =============== SimpleTransfer 2.2.1 - Command Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=937 Release Date: ============= 2013-05-02 Vulnerability Laboratory ID VL-ID: ==================================== 93...

Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities

Document Title: =============== Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=934 Release Date: ============= 2013-04-26 Vulnerability Laboratory ID VL-ID: ====================================...

Photo Transfer v4.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== Photo Transfer v4.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=933 Release Date: ============= 2013-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 933...

Photo Transfer v4.1 iOS - Multiple Web Vulnerabilities

Document Title: =============== Photo Transfer v4.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=933 Release Date: ============= 2013-04-23 Vulnerability Laboratory ID VL-ID: ==================================== 933...

WordPress WP Photo Album Plus Plugin <= 5.0.2 - XSS

Because of this vulnerability, the attackers can inject arbitrary web script or HTML via the "commentid" parameter in a wppamanagecomments edit action. Solution Update the plugin...

Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities

Document Title: =============== Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=932 Release Date: ============= 2013-04-20 Vulnerability Laboratory ID VL-ID: ===================================...

Piwigo Detection

The remote web server hosts Piwigo, an open source photo gallery application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65768; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Piwigo...

Gallery Detection

The remote host is running Gallery, an open source photo album application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65766; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Gallery...

Wordpress FuneralPress Plugin 1.1.6 - Persistent XSS

Exploit for php platform in category web applications A low-privilege or guest user can inject code via the , and elements which are part of the wpfhuploadform form in http://site/obituaries/?id=ID&f=guestbook&m=add Scripts injected via the "photo-message" and "youtube-message" elements will be...

WordPress FuneralPress 1.1.6 Cross Site Scripting

WP FuneralPress - stored xss in guestbook "FuneralPress is an online website obituary management and guest book program for funeral homes and cemeteries" http://wpfuneralpress.com/ tested on: funeralpress version 1.1.6 / wordpress version 3.5.1 impact: malicious script execution as wordpress...

Scripteen FunPhoto Mix Cross Site Scripting

/ / / \ / / / / / / / / / / / // / / / / / / // / // / / / / | // / / / / / // / / / // / /,// /////,// ///// , / // Scripteen FunPhoto Mix Script, XSS Vulnerabilities Software Page: http://scripteen.com/scripts/scripteen-fun-photo-script.html Script Demo: http://www.funphoto.scripteen.com/...

Threat Outbreak Alert: Fake Photo Attachment Email Messages on February 24, 2013

Medium Alert ID: 28366 First Published: 2013 February 26 00:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain a photo attachment for the recipient. The text in the e-mail message attempts to convince the recipient to...

Another iPhone Passcode Bypass Vulnerability Discovered

It’s getting hard to keep track of all the bugs piling up for Apple’s iPhone. Now it seems a glitch in the iOS kernel of Apple’s much maligned iOS 6.1 is responsible for yet another passcode bypass vulnerability, the second to surface this month. Attackers can apparently access users’ photos,...

WordPress Mac Photo Gallery 2.8 File Disclosure

File disclosure vulnerability in WordPress Mac Photo Gallery plugin Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress WP Photo Album Plus Plugin 'Search Photos' XSS Vulnerability

WordPress WP Photo Album Plus Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

WordPress Photo Plus / Photo Search XSS / CSRF

Exploit Title: Word Press Photo Plus, Photo Search XSS/CSRF Vulnerability Google Dork: Date: 29/12/12 Exploit Author: k3170makan Vendor Homepage: http://wordpress.org/extend/plugins/wp-photo-album-plus/ Software Link: http://wordpress.org/extend/plugins/wp-photo-album-plus/ Version: 4.8.11 Tested...

Facebook Streamlines Privacy Controls in Latest Update

In what may be the least surprising news of the day, Facebook is again making changes to its privacy controls. The existing privacy controls, which we explored in depth in our How-To Video on the subject, are a bit convoluted. So it makes sense that product manager Samuel Lessin is rolling out so...

WordPress - PICA Photo Gallery Automatic SQL Injection (perl)

Exploit for php platform in category web applications Exploit title: WordPress - PICA Photo Gallery Automatic SQL Injection perl Author: D35m0nd142 Software Link: http://www.apptha.com/category/extension/Wordpress/PICA-Photo-Gallery Google Dork: intext:"Powered by Apptha." inurl:gallery Thanks to...

CVE-2012-5891

Multiple cross-site request forgery CSRF vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an add action, 2 change user passwords via a change action, or 3 delete a user v...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add a user via an add action, 2 change user passwords via a change action, or 3 delete a user v...