WordPress - PICA Photo Gallery SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Mac Photo Gallery for WordPress 'albid' Parameter Traversal Arbitrary File Access

The Mac Photo Gallery for WordPress hosted on the remote web server is affected by a file disclosure vulnerability due to a failure to properly sanitize user-supplied input to the 'albid' parameter of the 'macdownload.php' script. This vulnerability allows an unauthenticated, remote attacker to...

CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2012-4925

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Sql injection

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2012-4926

The CVE-2012-4926 issue affects Img Pals Photo Host 1.0, specifically the approve.php endpoint. The root cause is lack of authentication on requests, allowing remote attackers to change administrator activation via the u parameter in actions (app0 for disable, app1 for enable). The connected reco...

CVE-2012-4925

CVE-2012-4925 describes multiple SQL injection vulnerabilities in Img Pals Photo Host 1.0, triggered via the u parameter in approve.php when performing app0 or app1 actions. The issue allows remote attackers to execute arbitrary SQL commands. The CVSSv2 score is 7.5 (HIGH) with network attack vec...

CVE-2012-4926

approve.php in Img Pals Photo Host 1.0 does not authenticate requests, which allows remote attackers to change the activation of administrators via the u parameter in an 1 app0 disable or 2 app1 enable action...

CVE-2012-4925

Multiple SQL injection vulnerabilities in approve.php in Img Pals Photo Host 1.0 allow remote attackers to execute arbitrary SQL commands via the u parameter in a 1 app0 or 2 app1 action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Webify Photo Gallery Arbitrary File Deletion

!x! Informations: Name : Webify photo gallery Download : http://webify.ws/photogallery Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM !x! Bug: Delete Arbitrary File Vulnerability you can...

Webify Photo Gallery - Arbitrary File Deletion

!x! Informations: Name : Webify photo gallery Download : http://webify.ws/photogallery Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM !x! Bug: Delete Arbitrary File Vulnerability you can...

Webify Photo Gallery - Arbitrary File Deletion

Webify Photo Gallery - Arbitrary File Deletion !x! Informations: Name : Webify photo gallery Download : http://webify.ws/photogallery Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : [email protected] Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM !x! Bug:...

Webify Photo Gallery Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications !x! Informations: Name : Webify photo gallery Download : http://webify.ws/photogallery Vulnerability : Delete Arbitrary File Vulnerability Author : JIKOJAWAD Contact : email protected Site : No-ExploiT.CoM Is Back Notes : No-ExploiT.CoM !x! Bu...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240

Corel PHOTO‑PAINT and CorelDRAW X5 (version 15.1.0.588) are affected by multiple untrusted search path vulnerabilities that allow local users to gain privileges when a Trojan horse in the current working directory precedes legitimate DLLs. The root cause is untrusted search paths involving dwmapi...

CVE-2011-5152

Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan horse 1 Wintab32.dll or 2 CV11-DialogEditor.dll file in the current working directory, as demonstrated by a directory that contains a .apd file. NOTE: the...

CVE-2011-5152

Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan horse 1 Wintab32.dll or 2 CV11-DialogEditor.dll file in the current working directory, as demonstrated by a directory that contains a .apd file. NOTE: the...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan horse 1 Wintab32.dll or 2 CV11-DialogEditor.dll file in the current working directory, as demonstrated by a directory that contains a .apd file. NOTE: the...

CVE-2011-5152

Multiple untrusted search path vulnerabilities in ACDSee Photo Editor 2008 5.x build 291 allow local users to gain privileges via a Trojan horse 1 Wintab32.dll or 2 CV11-DialogEditor.dll file in the current working directory, as demonstrated by a directory that contains a .apd file. NOTE: the...