TinyWebGallery 1.8.3 - Multiple Vulnerabilities

TinyWebGallery 1.8.3 - Multiple Vulnerabilities Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir,...

TinyWebGallery 1.8.3 - Multiple Vulnerabilities

Date: 01/02/2011 dd/MM/yyyy Script: TinyWebGallery Version: 1.8.3 No fixes yet, might work on other versions too. Home: http://www.tinywebgallery.com -- Vulnerability: Non-persistent XSS Where: File: /admin/index.php Parameters: sview, tview, dir, item. Examples:...

TinyWebGallery 1.8.3 Remote File Inclusion

Exploit Title: TinyWebGallery v 1.8.3 Remote file include vulnerbility Google Dork: Photo Gallery powered by TinyWebGallery 1.8.3 Date: 26/1/2011 Author: DIES3L Software Link: http://www.tinywebgallery.com Version: v 1.8.3 Tested on: ubuntu + win7 Email : [email protected] Fichier : ibasic.inc.php...

CVE-2011-0519

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2011-0519

The CVE-2011-0519 entry describes a SQL injection vulnerability in the Gallarific PHP Photo Gallery script (version 2.1 and possibly other versions) where the id parameter in gallery.php enables remote attackers to execute arbitrary SQL commands. The Red Hat and NVD entries agree on the affected ...

CVE-2011-0519

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-4693

Multiple cross-site scripting XSS vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters to help.php, or 3 picfileXXX parameter to searchnew.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters to help.php, or 3 picfileXXX parameter to searchnew.php...

CVE-2010-4693

Multiple cross-site scripting XSS vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters to help.php, or 3 picfileXXX parameter to searchnew.php...

CVE-2010-4693

Coppermine Photo Gallery 1.5.10 and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities due to insufficient sanitization of user-supplied input. Exploitable via the h and t parameters to help.php, or via picfile_XXX parameters to searchnew.php, allowing attackers to inject...

Facebook virus spreads via photo album chat messages !

A new social networking worm in the vein of Koobface is currently doing the rounds. A Naked Security reader, George, who had been exposed to it on Facebook reported it to us - unlike the majority of Facebook scams we report, this one actively infects your computer with malware instead of simply...

HP Photo Creations audio.Record ActiveX Stack Buffer Overflow

Added: 01/10/2011 BID: 45631 Background HP Photo Creations is free software that lets the user create photo books, calendars, collages, greeting cards and other keepsakes that can be printed or shipped to the user. HP Photo Creations installs and registers the audio.Record ActiveX control which...

HP Photo Creations audio.Record ActiveX Stack Buffer Overflow

Added: 01/10/2011 BID: 45631 Background HP Photo Creations is free software that lets the user create photo books, calendars, collages, greeting cards and other keepsakes that can be printed or shipped to the user. HP Photo Creations installs and registers the audio.Record ActiveX control which...

HP Photo Creations audio.Record ActiveX Stack Buffer Overflow

Added: 01/10/2011 BID: 45631 Background HP Photo Creations is free software that lets the user create photo books, calendars, collages, greeting cards and other keepsakes that can be printed or shipped to the user. HP Photo Creations installs and registers the audio.Record ActiveX control which...

HP Photo Creations audio.Record ActiveX Stack Buffer Overflow

Added: 01/10/2011 BID: 45631 Background HP Photo Creations is free software that lets the user create photo books, calendars, collages, greeting cards and other keepsakes that can be printed or shipped to the user. HP Photo Creations installs and registers the audio.Record ActiveX control which...

“Happy one hundred phases in the Park”photo album GETSHELL vulnerabilities-vulnerability warning-the black bar safety net

The vulnerability appears in the index.php if$do == 'upload' if$POST'formsub' $file = $FILES'upload'; if!$ file'error' ifstrpos$file'type', 'image' === 0 $hash = $POST'i'.'. jpg'; //if IIS, then here can be self-configured IIS malformed file extension to get a webshell...

Coppermine Photo Gallery Multiple XSS Vulnerabilities

Coppermine Photo Gallery is prone to multiple cross-site scripting XSS vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Coppermine Photo Gallery Multiple Cross Site Scripting Vulnerabilities

Coppermine Photo Gallery is prone to multiple cross-site-scripting vulnerabilities because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This ma...

GALLARIFIC PHP Photo Gallery Script (gallery.php) SQL Injection

Exploit for php platform in category web applications .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.gallarific.com/download.php .:. Dork : inurl:"/gadmin/index.php" === Exploit === www.site.com/gallery.php?id=nullSql Injection...