Lucene search
+L

6715 matches found

Patchstack
Patchstack
added 2012/06/11 12:00 a.m.11 views

WordPress Pica Photo Gallery 1.0 - Arbitrary File Upload

Pica Photo Gallery plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible...

2.1AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
added 2012/06/11 12:00 a.m.9 views

WordPress Mac Photo Gallery Plugin 2.7 - Arbitrary File Upload

Mac Photo Gallery plugin is prone to an arbitrary file upload vulnerability. Restricted access to this script is not properly realized. In that way an attacker can to upload files containing malicious PHP code and run it in the context of the web server process. Other attacks are also possible...

2.3AI score
SaveExploits0References1Affected Software1
Exploit DB
Exploit DB
added 2012/06/11 12:00 a.m.31 views

WordPress Plugin Pica Photo Gallery 1.0 - Arbitrary File Upload

Exploit Title: Wordpress Pica Photo Gallery 1.0 Arbitrary File Upload Google Dork: inurl:wp-content/plugins/pica-photo-gallery/ Date: 11/06/2012 Exploit Author: Adrien Thierry Vendor Homepage: http://www.apptha.com Software Link: http://downloads.wordpress.org/plugin/pica-photo-gallery.zip Versio...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/06/08 12:00 a.m.44 views

WordPress Plugin PICA Photo Gallery 1.0 - Remote File Disclosure

Description : Wordpress Plugins - PICA Photo Gallery Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/pica-photo-gallery/ Plugins : http://downloads.wordpress.org/plugin/pica-photo-gallery.zip Date : 30-05-2012 Google Dork :...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2012/06/08 12:00 a.m.23 views

WordPress Plugin PICA Photo Gallery 1.0 - Remote File Disclosure

WordPress Plugin PICA Photo Gallery 1.0 - Remote File Disclosure Description : Wordpress Plugins - PICA Photo Gallery Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/pica-photo-gallery/ Plugins :...

0.1AI score
SaveExploits0
Patchstack
Patchstack
added 2012/06/08 12:00 a.m.10 views

WordPress Pica Photo Gallery Plugin 1.0 - Remote File Disclosure

WordPress Pica Photo Gallery plugin is prone to a remote file disclosure vulnerability. It allows an attacker to compromise encrypted login credentials for or retrieve the device's administrator password allowing them to directly access the device's configuration control panel. Solution Update th...

3.9AI score
SaveExploits0References1Affected Software1
Packet Storm
Packet Storm
added 2012/06/08 12:00 a.m.24 views

WordPress PICA Photo Gallery 1.0 File Disclosure

Description : Wordpress Plugins - PICA Photo Gallery Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/pica-photo-gallery/ Plugins : http://downloads.wordpress.org/plugin/pica-photo-gallery.zip Date : 30-05-2012 Google Dork :...

0.1AI score
SaveExploits0
zdt
zdt
added 2012/06/07 12:00 a.m.38 views

Wordpress Plugins - PICA Photo Gallery Remote File Disclosure Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - PICA Photo Gallery Remote File Disclosure Vulnerability Version : 1.0 Link : http://wordpress.org/extend/plugins/pica-photo-gallery/ Plugins : http://downloads.wordpress.org/plugin/pica-photo-gallery.zip Googl...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2012/05/28 12:00 a.m.16 views

Yamamah Photo Gallery 1.1 - Database Information Disclosure

Yamamah Photo Gallery 1.1 - Database Information Disclosure source: https://www.securityfocus.com/bid/53709/info Yamamah Photo Gallery is prone to an information-disclosure vulnerability. An attacker can exploit this issue to download the database that contain sensitive information. Information...

7.2AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/28 12:00 a.m.19 views

Yamamah Photo Gallery 1.1 - Database Information Disclosure

source: https://www.securityfocus.com/bid/53709/info Yamamah Photo Gallery is prone to an information-disclosure vulnerability. An attacker can exploit this issue to download the database that contain sensitive information. Information harvested may aid in launching further attacks. Yamamah 1.1.0...

5.3AI score
SaveExploits0
exploitpack
exploitpack
added 2012/05/22 12:00 a.m.14 views

Plogger Photo Gallery - SQL Injection

Plogger Photo Gallery - SQL Injection source: https://www.securityfocus.com/bid/53644/info Plogger Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to...

0.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/22 12:00 a.m.24 views

Plogger Photo Gallery - SQL Injection

source: https://www.securityfocus.com/bid/53644/info Plogger Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, to access ...

7.5CVSS5.2AI score0.03437EPSS
SaveExploits2
NVD
NVD
added 2012/05/21 10:55 p.m.24 views

CVE-2012-2920

Cross-site scripting XSS vulnerability in the userphotooptionspage function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to wp-admin/options-general.php. NOTE: some of these details are...

4.3CVSS5.8AI score0.02165EPSS
SaveExploits0References6
Prion
Prion
added 2012/05/21 10:55 p.m.13 views

Cross site scripting

Cross-site scripting XSS vulnerability in the userphotooptionspage function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to wp-admin/options-general.php. NOTE: some of these details are...

4.3CVSS6.3AI score0.02165EPSS
SaveExploits0References6Affected Software1
CVE
CVE
added 2012/05/21 10:00 p.m.42 views

CVE-2012-2920

The CVE-2012-2920 entry involves a Cross-site Scripting (XSS) vulnerability in the WordPress User Photo plugin, specifically in the userphoto_options_page function of user-photo.php prior to version 0.9.5.2. The issue allows remote attackers to inject arbitrary web script or HTML via PATH_INFO to...

4.3CVSS6AI score0.02165EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2012/05/21 10:00 p.m.26 views

CVE-2012-2920

Cross-site scripting XSS vulnerability in the userphotooptionspage function in user-photo.php in the User Photo plugin before 0.9.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO to wp-admin/options-general.php. NOTE: some of these details are...

5.8AI score0.02165EPSS
SaveExploits0References6
Patchstack
Patchstack
added 2012/05/21 12:00 a.m.33 views

WordPress User Photo Plugin <= 0.9.5.1 - XSS

Because of this vulnerability in user-photo.php, attackers can inject arbitrary web script or HTML via the PATHINFO to wp-admin/options-general.php. Solution Update the plugin...

4.3CVSS2.9AI score0.02165EPSS
SaveExploits0References1Affected Software1
exploitpack
exploitpack
added 2012/05/20 12:00 a.m.22 views

AZ Photo Album - Cross-Site Scripting Arbitrary File Upload

AZ Photo Album - Cross-Site Scripting Arbitrary File Upload source: https://www.securityfocus.com/bid/53641/info The AZ Photo Album is prone to a cross-site-scripting and an arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit thes...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2012/05/20 12:00 a.m.26 views

AZ Photo Album - Cross-Site Scripting / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53641/info The AZ Photo Album is prone to a cross-site-scripting and an arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to steal cookie information, execute arbitrary clie...

5.3AI score
SaveExploits0
OpenVAS
OpenVAS
added 2012/04/23 12:00 a.m.11 views

Fedora Update for gallery3 FEDORA-2012-5822

Check for the Version of gallery3 OpenVAS Vulnerability Test Fedora Update for gallery3 FEDORA-2012-5822 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

4.3CVSS6.4AI score0.01674EPSS
SaveExploits0References2
Rows per page
Query Builder