Coppermine Photo Gallery 1.4.14 Remote Command Execution Exploit

No description provided by source. waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web:...

Coppermine Photo Gallery 1.4.14 - Remote Command Execution

waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-65.html Target software descriptio...

[waraxe-2008-SA#065] - Remote Shell Command Execution in Coppermine 1.4.14

waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-65.html Target software descriptio...

Coppermine Photo Gallery 1.4.14 Remote Command Execution Exploit

Exploit for unknown platform in category web applications ================================================================ Coppermine Photo Gallery 1.4.14 Remote Command Execution Exploit ================================================================ waraxe-2008-SA065 - Remote Shell Command...

Coppermine Photo Gallery 1.4.14 - Remote Command Execution

Coppermine Photo Gallery 1.4.14 - Remote Command Execution waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web:...

Coppermine Photo Gallery <= 1.4.14 Remote SQL Injection Exploit

No description provided by source. ?php RST/GHC PRIVATE CPG 1.4.10 sql injection exploit Date: 17.05.07 bug: SQL injection in private album function through array indexes with COOKIE errorreporting EERROR; iniset"maxexecutiontime",0; intro; if $argc 4 print " Usage: " . $argv0 . " host dir force...

Coppermine Photo Gallery 1.4.10 Remote SQL Injection Exploit

No description provided by source. ?php Coppermine gallery SQL injection exploit based on RST/GHC bugs Author: bazik, icq 178377 errorreporting0; class cpg1410xek public $GLOBALS = array; function prepareExp$sql $a1 = '1 UNION SELECT ' . $this-toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'...

Coppermine Photo Gallery < 1.4.11 Album Password Cookie SQL Injection

Binary data 4351.prm...

Coppermine Photo Gallery 1.4.10 - SQL Injection

table prefix\n"; print " - hostname\n"; print " - web dirname \n"; print " - force mode - '0' - for Off or "album number" for force mode On \n"; print " table prefix - prefix of sql tables\n"; print " example: " . $argv0 . " coppermine.site photo/ 1 cpg1410\n"; credits; / FUNCTIONS / if...

Coppermine Photo Gallery 1.4.10 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Coppermine Photo Gallery 1.4.10 Remote SQL Injection Exploit ============================================================ toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $...

Coppermine Photo Gallery 1.4.10 - 'cpg1410_xek.php' SQL Injection

toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i GLOBALS'host', 80, $errno, $errstr, 30; if!$fp die"- Can't connec...

Coppermine Photo Gallery 1.4.10 - cpg1410_xek.php SQL Injection

Coppermine Photo Gallery 1.4.10 - cpg1410xek.php SQL Injection toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin.php or 2 index.php in photo/...

CVE-2008-0359

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin.php or 2 index.php in photo/...

Debian Security Advisory DSA 1404-1 (gallery2)

The remote host is missing an update to gallery2 announced via advisory DSA 1404-1. OpenVAS Vulnerability Test $Id: deb14041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1404-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian: Security Advisory (DSA-512)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 138-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 138-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 138-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 138-1. OpenVAS Vulnerability Test $Id: deb1381.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 138-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 512-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 512-1. OpenVAS Vulnerability Test $Id: deb5121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 512-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 355-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 355-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...