Coppermine Photo Gallery album Password Cookie SQL Injection

The version of Coppermine installed on the remote host fails to sanitize user-supplied input to the album password cookie before using it in a database query in the 'getprivatealbumset' function in 'include/functions.inc.php'. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able ...

Apple iPhoto 4.0.3 DPAP Server Denial of Service Exploit

No description provided by source. !/usr/bin/perl crash the iPhoto DPAP Digital Photo Access Protocol Server on iPhoto 4.0.3 technically the server exits cleanly but it does not restart use IO::Socket::INET; die "Usage $0 targetip\n" unless $ARGV0; $| = 1; if $ARGV1 $port = $ARGV1; else ...

CVE-2008-0830

The Digital Photo Access Protocol DPAP server for iPhoto 4.0.3 allows remote attackers to cause a denial of service crash via a malformed dpap: URI, a different vulnerability than CVE-2008-0043...

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal source: https://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access...

SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal

source: https://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks. Th...

"Apple iPhoto 4.0.3 DPAP Server Denial of Service Exploit"

No description provided by source. !/usr/bin/perl crash the iPhoto DPAP Digital Photo Access Protocol Server on iPhoto 4.0.3 technically the server exits cleanly but it does not restart use IO::Socket::INET; die "Usage $0 targetip\n" unless $ARGV0; $| = 1; if $ARGV1 $port = $ARGV1; else $port =...

Apple iOS 4.0.3 - DPAP Server Denial of Service

!/usr/bin/perl crash the iPhoto DPAP Digital Photo Access Protocol Server on iPhoto 4.0.3 technically the server exits cleanly but it does not restart use IO::Socket::INET; die "Usage $0 \n" unless $ARGV0; $| = 1; if $ARGV1 $port = $ARGV1; else $port = 8770; $socket=new...

Wordpress Photo album Remote SQL Injection Vulnerability

No description provided by source. WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLO陌T...

WordPress Plugin Photo album - SQL Injection

WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLOÄ°T...

WordPress Plugin Photo album - SQL Injection

WordPress Plugin Photo album - SQL Injection WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLOÄ°T...

[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-8.fc8

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

Buffer overflow

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager (versions 8.1, 9.0, 10.0) allows a user-assisted remote attacker to execute arbitrary code via a malformed XBM file. The issue arises during XBM processing and may be related to CVE-2007-6009. No remediation or exploit details are provided in the connected ...

CVE-2008-0715

Buffer overflow in ACDSee Photo Manager 8.1, 9.0, and 10.0 allows user-assisted remote attackers to execute arbitrary code via a malformed XBM file. NOTE: this might be the same as CVE-2007-6009...

Facebook Photo Uploader 4 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Facebook Photo Uploader 4. By sending an overly long string to the "ExtractIptc" property located in the ImageUploader4.ocx 4.5.57.0 Control, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

Facebook Photo Uploader ActiveX Control < 4.5.57.1 Multiple Buffer Overflows

The remote host contains a version of the Facebook Photo Uploader ActiveX control that reportedly is affected by multiple buffer overflows involving, for example, long arguments to the control's 'ExtractExif', 'ExtractIptc', and 'FileMask' properties. If a remote attacker can trick a user on the...

waraxe-2008-SA066.txt

waraxe-2008-SA066 - Multiple Vulnerabilities in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 31. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-66.html Target software description:...

Sql injection

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery CPG before 1.4.15 allow remote authenticated administrators to execute arbitrary SQL commands via the 1 albumid, 2 startpic, and 3 numpics parameters to util.php; and 4 cidarray parameter to reviewcom.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.15 allow remote attackers to inject arbitrary web script or HTML via the 1 h and 2 t parameters...