CVE-2008-6988

CVE-2008-6988 concerns Easy Photo Gallery (Ezphotogallery) 2.1 with multiple XSS vulnerabilities. The affected component is the web application’s dynamic pages, specifically gallery.php and show.php, where user-supplied parameters (galleryid on gallery.php; size or imageid on show.php) can be man...

CVE-2008-6989

CVE-2008-6989 concerns Easy Photo Gallery (Ezphotogallery) 2.1, where gallery.php is vulnerable to SQL injection via the username parameter. The root cause is improper handling of the username input, allowing remote attackers to execute arbitrary SQL commands. Documented impact indicates the vuln...

CVE-2008-6990

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6988

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

CVE-2008-6990

The CVE-2008-6990 entry concerns Easy Photo Gallery (aka Ezphotogallery) 2.1, where a SQL injection flaw exists in gallery.php. The vulnerability allows remote attackers to inject and execute arbitrary SQL commands through the password parameter. This is based on multiple connected sources (NVD, ...

MyWeight 1.0 - Arbitrary File Upload

MyWeight 1.0 - Arbitrary File Upload ======================================================= +++++++++++++++++++ information +++++++++++++++++++++++ ======================================================= + Script :MyWeight 1.0 Shell Upload Vulnerability + D0rk : Powered By phplemon.com + Script...

MyWeight 1.0 Remote Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================== MyWeight 1.0 Remote Shell Upload Vulnerability ============================================== ======================================================= +++++++++++++++++++ information...

Gallarific 1.1 (gallery.php) Arbitrary Delete/Edit Category Vuln

No description provided by source. Gallarific Photo Gallery = 1.0 Arbitrary Delete-Edit Category Vulnerability //Author: iLker Kandemir -- MEFISTO //Price : 47 $ //script demo : http://www.gallarific.com/demo/index.php //imhatimi.org ---------------------------------------------------------------...

Gallarific Photo Gallery 1.0 Delete Issue

Gallarific Photo Gallery = 1.0 Arbitrary Delete-Edit Category Vulnerability //Author: iLker Kandemir -- MEFISTO //Price : 47 $ //script demo : http://www.gallarific.com/demo/index.php //imhatimi.org ---------------------------------------------------------------- //exploit : 1...

Gallarific 1.1 - gallery.php Arbitrary DeleteEdit Category

Gallarific 1.1 - gallery.php Arbitrary DeleteEdit Category Gallarific Photo Gallery = 1.0 Arbitrary Delete-Edit Category Vulnerability //Author: iLker Kandemir -- MEFISTO //Price : 47 $ //script demo : http://www.gallarific.com/demo/index.php //imhatimi.org...

Gallarific 1.1 - '/gallery.php' Arbitrary Delete/Edit Category

Gallarific Photo Gallery = 1.0 Arbitrary Delete-Edit Category Vulnerability //Author: iLker Kandemir -- MEFISTO //Price : 47 $ //script demo : http://www.gallarific.com/demo/index.php //imhatimi.org ---------------------------------------------------------------- //exploit : 1...

Gallarific 1.1 (gallery.php) Arbitrary Delete/Edit Category Vuln

Exploit for unknown platform in category web applications ================================================================ Gallarific 1.1 gallery.php Arbitrary Delete/Edit Category Vuln ================================================================ Gallarific Photo Gallery = 1.0 Arbitrary...

Unrestricted file upload

Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...

PHP Photo Vote 1.3F - page Cross-Site Scripting

PHP Photo Vote 1.3F - page Cross-Site Scripting source: https://www.securityfocus.com/bid/44136/info PHP Photo Vote is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in t...

PHP Photo Vote 1.3F - 'page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/44136/info PHP Photo Vote is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...

PHP Photo Vote 1.3F Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || PHP Photo Vote 1.3F Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.ecomstudio.net/sales/ Greetings :...

[SECURITY] Fedora 10 Update: gnome-web-photo-0.3-21.fc10

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

[SECURITY] Fedora 11 Update: gnome-web-photo-0.7-5.fc11

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

e107 Plugin my_gallery 2.4.1 - readfile() Local File Disclosure

e107 Plugin mygallery 2.4.1 - readfile Local File Disclosure Web 2 XPL : File 2 Read : "; if $POST'xpl' $data .= "GET /$vuln$trasv$file HTTP/1.1\r\n"; $data .= "Host: $host\r\n"; $data...

e107 Plugin my_gallery 2.4.1 readfile() Local File Disclosure Exploit

No description provided by source. ?php / ============================================ o e107 Plugin mygallery 2.4.1 Exploit o ============================================ Bug found by NoGe - [email protected] Exploit coded by Vrs-hCk - [email protected] Plugin mygallery create photo gallery...