6722 matches found
MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit
No description provided by source. !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...
CVE-2008-4714
Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...
Authentication flaw
Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...
CVE-2008-4714
Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...
CVE-2008-4714
CVE-2008-4714 affects Atomic Photo Album 1.1.0 pre4, where improper handling of the apa_cookie_login and apa_cookie_password cookies can allow remote attackers to bypass authentication and gain administrative access by modifying cookies. The vulnerability is documented in multiple sources (NVD en...
MindDezign Photo Gallery 2.2 (index.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= MindDezign Photo Gallery 2.2 index.php id SQL Injection Vulnerability =======================================================================...
minddezignpg-sql.txt
================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...
MindDezign Photo Gallery 2.2 - SQL Injection
================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...
MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit
Exploit for unknown platform in category web applications ======================================================== MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit ======================================================== !/usr/bin/perl...
MindDezign Photo Gallery 2.2 - SQL Injection
MindDezign Photo Gallery 2.2 - SQL Injection ================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ==================================================================================...
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, |...
MindDezign Photo Gallery 2.2 - Arbitrary Add Admin
!/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...
CVE-2008-4626
Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...
CVE-2008-4626
The CVE-2008-4626 issue affects yappa-ng (Fritz Berger yet another php photo album) paired with PHP. A Local File Inclusion vulnerability exists in index.php: when magic_quotes_gpc is disabled, the album parameter can cause the script to include and potentially execute local files. Affected versi...
ifoto-disclose.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- iFoto, CSS-based GD2 photo gallery eNYe-Sec - www.enye-sec.org -- Description by the author's page -- This is yet another Web-based PHP photo gallery called, iFoto. iFoto use 90% CSS-based layout and can be customize ...
iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- iFoto, CSS-based GD2 photo gallery = 1.0: Remote File Disclosure Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: iFoto, CSS-based GD2 photo gallery $ File...
CVE-2008-4370
Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...
CVE-2008-4369
SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...