6752 matches found
Dynamic photo gallery 1.02 (albumID) Remote SQL Injection Vulnerability
No description provided by source. Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link:...
dynamic-sql.txt
Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...
Dynamic photo gallery V1.02 SQL Injection
Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...
Dynamic photo gallery 1.02 (albumID) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ======================================================================= Dynamic photo gallery 1.02 albumID Remote SQL Injection Vulnerability ======================================================================= Aria-Security Team...
Dynamic photo Gallery 1.02 - 'albumID' SQL Injection
Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...
CVE-2008-0939
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...
CVE-2008-0939
The WP Photo Album (WPPA) WordPress plugin (before 1.1) contains multiple SQL injection flaws in wppa.php. The issues arise from unsafely handling the photo parameter (wppa_photo_name) and the album parameter (wppa_album_name) in index.php, allowing remote attackers to execute arbitrary SQL comma...
CVE-2008-0939
Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...
WordPress WP Photo Album Plugin <= 1.0 - Multiple SQL Injection
Because of these vulnerabilities in wppa.php, the attackers can execute arbitrary SQL commands. Solution Update thne plugin...
Coppermine Photo Gallery album Password Cookie SQL Injection
The version of Coppermine installed on the remote host fails to sanitize user-supplied input to the album password cookie before using it in a database query in the 'getprivatealbumset' function in 'include/functions.inc.php'. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able ...
Apple iPhoto 4.0.3 DPAP Server Denial of Service Exploit
No description provided by source. !/usr/bin/perl crash the iPhoto DPAP Digital Photo Access Protocol Server on iPhoto 4.0.3 technically the server exits cleanly but it does not restart use IO::Socket::INET; die "Usage $0 targetip\n" unless $ARGV0; $| = 1; if $ARGV1 $port = $ARGV1; else ...
CVE-2008-0830
The Digital Photo Access Protocol DPAP server for iPhoto 4.0.3 allows remote attackers to cause a denial of service crash via a malformed dpap: URI, a different vulnerability than CVE-2008-0043...
SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal
SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal source: https://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access...
SIMM-Comm SCI Photo Chat 3.4.9 - Directory Traversal
source: https://www.securityfocus.com/bid/27872/info SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks. Th...
"Apple iPhoto 4.0.3 DPAP Server Denial of Service Exploit"
No description provided by source. !/usr/bin/perl crash the iPhoto DPAP Digital Photo Access Protocol Server on iPhoto 4.0.3 technically the server exits cleanly but it does not restart use IO::Socket::INET; die "Usage $0 targetip\n" unless $ARGV0; $| = 1; if $ARGV1 $port = $ARGV1; else $port =...
Apple iOS 4.0.3 - DPAP Server Denial of Service
!/usr/bin/perl crash the iPhoto DPAP Digital Photo Access Protocol Server on iPhoto 4.0.3 technically the server exits cleanly but it does not restart use IO::Socket::INET; die "Usage $0 \n" unless $ARGV0; $| = 1; if $ARGV1 $port = $ARGV1; else $port = 8770; $socket=new...
Wordpress Photo album Remote SQL Injection Vulnerability
No description provided by source. WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MA陌L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLO陌T...
WordPress Plugin Photo album - SQL Injection
WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLOÄ°T...
WordPress Plugin Photo album - SQL Injection
WordPress Plugin Photo album - SQL Injection WordPress album PHOTO SQL Injection AUTHOR : S@BUN HOME 1 : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: pageid album "photo" EXAMPLE http://xxxxxxxx/?pageid=13&album= exploit EXPLOÄ°T...
