Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling

Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind javascript:document.cookie = "apacookielogin=foo; path=/;"; javascript:document.cookie = "apacookiepassword=bar; path=/;"; milw0rm.com 2008-09-26...

Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling

Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling + Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind javascript:document.cookie = "apacookielogin=foo; path=/;"; javascript:document.cookie = "apacookiepassword=bar; path=/;";...

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection

----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date: 25.09.2008 [email protected]...

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting SQL Injection

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting SQL Injection ----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net...

Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities

No description provided by source. ----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date:...

atomic-sqlxss.txt

----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date: 25.09.2008 [email protected]...

Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Atomic Photo Album 1.1.0pre4 XSS/SQL Remote Vulnerabilities =============================================================...

CVE-2008-4167

useradmin.php in Easy Photo Gallery aka Ezphotogallery 2.1 does not require administrative authentication, which allows remote attackers to 1 add or 2 remove an Administrator account...

CVE-2008-4167

CVE-2008-4167 affects Easy Photo Gallery (Ezphotogallery) 2.1. The issue: useradmin.php does not require administrative authentication, allowing remote attackers to (1) add or (2) remove an Administrator account. The root cause, per the description, is a lack of authentication for admin account m...

CVE-2008-4167

useradmin.php in Easy Photo Gallery aka Ezphotogallery 2.1 does not require administrative authentication, which allows remote attackers to 1 add or 2 remove an Administrator account...

Easy Photo Gallery 2.1 XSS/FD/Bypass/SQL Injection Exploit

No description provided by source. !/usr/bin/perl ---------------------------------------------------------------- Script : Ezphotogallery 2.1 Type : Multiple Vulnerabilities Xss/Login Bypass/Sql injection Exploit/File Disclosure Method : GET Alert : High Google Dork : "100% | 50% | 25%" "Back to...

availphoto-sqlxss.txt

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Photo Album pics.php Multiple Vulnerabilities Vendor:...

Availscript Photo Album (pics.php) Multiple Vulnerabilities

No description provided by source. /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Photo Album pics.php Multiple...

AvailScript Photo Album - pics.php Multiple Vulnerabilities

AvailScript Photo Album - pics.php Multiple Vulnerabilities /\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Photo...

Availscript Photo Album (pics.php) Multiple Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Availscript Photo Album pics.php Multiple Vulnerabilities =========================================================== Title: Availscript Photo Album pics.php Multiple...

AvailScript Photo Album - 'pics.php' Multiple Vulnerabilities

/\ \ /\ \ \ /\ /\ \ //\ \ \ \ \ \ \ \ \ \ \ /',\ \ \ \ \ \ \ \ /\ /'\ /'\ \ \ \ /\ ,\ /, \ \ \ \ ,\ \ \ \ // / // /\//\///\/\ \ \/\ // // // //////// //// security breakd0wn! Title: Availscript Photo Album pics.php Multiple Vulnerabilities Vendor:...

Unfixed XSS vulnerability at www.beepworld.de

Security researcher BackDoor, has submitted on 09/06/2008 a cross-site-scripting XSS vulnerability affecting www.beepworld.de, which at the time of submission ranked 5602 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is current...

Sql injection

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 qtitle, 2 qid, and 3 qyear parameters to a search.php, and the 4 email and 5 password parameters to b login.php...

CVE-2008-3788

Multiple SQL injection vulnerabilities in PICTURESPRO Photo Cart 3.9, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 qtitle, 2 qid, and 3 qyear parameters to a search.php, and the 4 email and 5 password parameters to b login.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in PICTURESPRO Photo Cart 3.9 allows remote attackers to inject arbitrary web script or HTML via the qtitle parameter aka "Gallery or event name" field in a search action...