AZ Photo Album - Cross-Site Scripting / Arbitrary File Upload

source: https://www.securityfocus.com/bid/53641/info The AZ Photo Album is prone to a cross-site-scripting and an arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues to steal cookie information, execute arbitrary clie...

Fedora Update for gallery3 FEDORA-2012-5822

Check for the Version of gallery3 OpenVAS Vulnerability Test Fedora Update for gallery3 FEDORA-2012-5822 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 15 Update: gallery3-3.0.3-1.fc15

Gallery is an open source project with the goal to develop and support leading photo sharing web application solutions...

[SECURITY] Fedora 16 Update: gallery3-3.0.3-1.fc16

Gallery is an open source project with the goal to develop and support leading photo sharing web application solutions...

[SECURITY] Fedora 17 Update: gallery3-3.0.3-1.fc17

Gallery is an open source project with the goal to develop and support leading photo sharing web application solutions...

FileStream Turbo Browser v11.6 - Buffer Overflow

Document Title: =============== FileStream Turbo Browser v11.6 - Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=491 Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID: ==================================== 491 Common...

FileStream Turbo Browser v11.6 - Buffer Overflow

Document Title: =============== FileStream Turbo Browser v11.6 - Buffer Overflow References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=491 Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID: ==================================== 491 Common...

KesionCMS section of the news site management system to V7. 0 0day-vulnerability warning-the black bar safety net

Pass to kill KesionCMS v7. 0 version, use conditions must be based on iis7. 0 erection. （A bit tasteless） it!!! The first step: registered users: http://www.. com /? do=reg Second step: access to photo album directly to the point of bulk upload fake good the jpg in a word, do not select a picture...

ImgPals Photo Host Version 1.0 Admin Account Disactivation

-=--------------------ADVISORY-------------------=- ImgPals Photo Host Version 1.0 STABLE Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: ImgPals Photo Host -=+ Version: 1.0 STABLE -=+ Vendor's URL:...

Synology Photo Station 5 - Reflected Cross-Site Scripting

Title : Photo Station 5 - Reflected Cross-Site Scripting Author : Simon Ganiere Vendor : http://www.sinology.com Advisory : CVE-2012-1556 Software : Photo Station 5 - DSM 3.2 1955 Date : 05/02/2012 30/01/2012 Issue Discovered 05/02/2012 Vendor Notified 06/03/2012 Vendor released DSM 4 Class:...

Webify Photo Gallery CSRF (add admin / change e-mail address)

Exploit for php platform in category web applications Exploit Title: Webify Photo Gallery CSRF add admin Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/webify-photo-gallery-free-php-photo-gallery/32382/ Category:: webapps Demo :...

Phonora Photo Gallery CSRF

Exploit for php platform in category web applications Exploit Title: Phonora Photo Gallery CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/phonora-photo-gallery/27420/ Category:: webapps Demo : http://www.parallelex.com/phonora/demo/photogallery/ Greetz: Inj3ct0r...

Potential Security Risk of Geotagging for the Military

Potential Security Risk of Geotagging for the Military Did you know that when you upload photos to the Internet they can tell more about you, then you would want to disclose to a random stranger watching it? Where you live, where you spend time with your kids, when you are at home, and when you a...

Maxs PHP Photo Album 1.0 - id Local File Inclusion

Maxs PHP Photo Album 1.0 - id Local File Inclusion source: https://www.securityfocus.com/bid/52474/info Max's PHP Photo Album is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and...

Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Max's PHP Photo Album 1.0 - 'id' Local File Inclusion

source: https://www.securityfocus.com/bid/52474/info Max's PHP Photo Album is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserv...

Microsoft Windows ActiveX Control Multiple Vulnerabilities (2647518)

This script will list all the vulnerable activex controls installed on the remote windows machine with references and cause. OpenVAS Vulnerability Test $Id: gbmswindowsactivexcontrolmultvuln.nasl 5988 2017-04-20 09:02:29Z teissa $ Microsoft Windows ActiveX Control Multiple Vulnerabilities 2647518...

Max's Photo Gallery 1.0 Local File Inclusion

Exploit Title: Maxs Photo Gallery Google Dork: "Powered by PHP F1" Date: 14/03/2012 Author: n0tch aka andmuchmore Software Link: http://www.phpf1.com/download.html?dl=18 Version: 1.0 Tested on: Windows 7 / LinuxUbuntu +-- LFI --+...

Synology Photo Station 5 DSM 3.2 - photo_one.php Script Cross-Site Scripting

Synology Photo Station 5 DSM 3.2 - photoone.php Script Cross-Site Scripting source: https://www.securityfocus.com/bid/52416/info Synology Photo Station is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute...

Synology Photo Station 5 DSM 3.2 - 'photo_one.php' Script Cross-Site Scripting

source: https://www.securityfocus.com/bid/52416/info Synology Photo Station is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...