Lucene search
+L

6757 matches found

Prion
Prion
added 2007/11/15 10:46 p.m.22 views

Heap overflow

Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in 1 a PSP image to the IDPSP.apl plug-in or 2 an LHA archive to the...

9.3CVSS8AI score0.04756EPSS
SaveExploits0References7Affected Software3
NVD
NVD
added 2007/11/15 10:46 p.m.27 views

CVE-2007-4344

Multiple input validation errors in ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allow user-assisted remote attackers to execute arbitrary code via a long section string in 1 a PSP image to the IDPSP.apl plug-in or 2 an LHA archive to the...

9.3CVSS7.6AI score0.04756EPSS
SaveExploits0References7
Prion
Prion
added 2007/11/15 10:46 p.m.30 views

Integer overflow

Integer overflow in the IDPSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow...

6.8CVSS8.3AI score0.03012EPSS
SaveExploits0References7Affected Software3
NVD
NVD
added 2007/11/15 10:46 p.m.23 views

CVE-2007-5994

PHP remote file inclusion vulnerability in checknoimage.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the configpathsrcinclude parameter...

6.8CVSS7.5AI score0.01225EPSS
SaveExploits0References3
NVD
NVD
added 2007/11/15 10:46 p.m.29 views

CVE-2007-6007

Integer overflow in the IDPSP.apl plug-in for ACD ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted PSP image that triggers a heap-based buffer overflow...

6.8CVSS7.8AI score0.03012EPSS
SaveExploits0References7
CVE
CVE
added 2007/11/15 10:00 p.m.68 views

CVE-2007-4344

CVE-2007-4344 involves heap-based buffer overflows in ACDSee products: PSP images processed by ID_PSP.apl and LHA archives by AM_LHA.apl, leading to remote code execution with user-assisted input. Affects ACDSee Photo Manager 9.0 build 108, Pro Photo Manager 8.1 build 99, and Photo Editor 4.0 bui...

9.3CVSS7.7AI score0.04756EPSS
SaveExploits0References7Affected Software3
CVE
CVE
added 2007/11/15 10:00 p.m.64 views

CVE-2007-6007

The CVE-2007-6007 entry describes an integer overflow in the ID_PSP.apl plug-in used by ACDSee Photo Manager 9.0 (build 108), Pro Photo Manager 8.1 (build 99), and Photo Editor 4.0 (build 195). The overflow triggers a heap-based buffer overflow via a crafted PSP image, enabling user-assisted remo...

6.8CVSS7.8AI score0.03012EPSS
SaveExploits0References7Affected Software3
Tenable Nessus
Tenable Nessus
added 2007/11/09 12:00 a.m.23 views

Debian DSA-1404-1 : gallery2 - programming error

Nicklous Roberts discovered that the Reupload module of Gallery 2, a web-based photo management application, allowed unauthorized users to edit Gallery's data file. The oldstable distribution sarge does not contain a gallery2 package. The previous gallery package is not affected by this...

6.4CVSS5.3AI score0.01695EPSS
SaveExploits0References2
Debian
Debian
added 2007/11/08 10:40 p.m.61 views

[SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1404-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...

6.4CVSS6.1AI score0.01695EPSS
SaveExploits0
Cvelist
Cvelist
added 2007/11/08 8:00 p.m.28 views

CVE-2004-2746

SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters...

8.5AI score0.02963EPSS
SaveExploits1References9
CVE
CVE
added 2007/11/08 8:00 p.m.56 views

CVE-2004-2746

CVE-2004-2746 : The connected Nessus/NASL entry confirms a SQL injection in XTreme ASP Photo Gallery 2.0, specifically in adminlogin.asp via the (1) username and (2) password parameters. This flaw allows remote attackers to inject arbitrary SQL commands, and the NASL text notes that this may be u...

7.5CVSS8.6AI score0.02963EPSS
SaveExploits1References9Affected Software1
Prion
Prion
added 2007/11/07 9:46 p.m.15 views

Cross site scripting

Cross-site scripting XSS vulnerability in displayecard.php in Coppermine Photo Gallery CPG before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter...

4.3CVSS6.1AI score0.01065EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2007/11/07 9:46 p.m.17 views

CVE-2007-5888

Cross-site scripting XSS vulnerability in displayecard.php in Coppermine Photo Gallery CPG before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter...

4.3CVSS5.7AI score0.01065EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2007/11/07 9:00 p.m.30 views

CVE-2007-5888

Cross-site scripting XSS vulnerability in displayecard.php in Coppermine Photo Gallery CPG before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter...

5.7AI score0.01065EPSS
SaveExploits0References5
Gentoo Linux
Gentoo Linux
added 2007/11/01 12:00 a.m.21 views

Gallery: Multiple vulnerabilities

Background Gallery is a PHP based photo album manager. Description Merrick Manalastas and Nicklous Roberts have discovered multiple vulnerabilities in the WebDAV and Reupload modules. Impact A remote attacker could exploit these vulnerabilities to bypass security restrictions and rename, replace...

6.4CVSS6.8AI score0.01695EPSS
SaveExploits0
CVE
CVE
added 2007/10/25 7:00 p.m.44 views

CVE-2003-1525

Technical details for CVE-2003-1525 are not publicly available in the provided documents. No affected products, impact, vectors, or remediation are specified. Monitor for updates.

10CVSS7AI score0.01446EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2007/10/25 7:00 p.m.27 views

CVE-2003-1525

Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors...

6.6AI score0.01446EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2007/10/25 12:00 a.m.25 views

Debian DSA-1389-2 : zoph - missing input sanitising

It was discovered that zoph, a web-based photo management system, performs insufficient input sanitising, which allows SQL injection. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-1389...

7.5CVSS5.6AI score0.01286EPSS
SaveExploits0References3
OSV
OSV
added 2007/10/24 12:00 a.m.30 views

DSA-1389-2 zoph - SQL injection

Bulletin has no description...

7.5CVSS6.1AI score0.01286EPSS
SaveExploits0
CVE
CVE
added 2007/10/20 10:00 a.m.54 views

CVE-2003-1428

CVE-2003-1428 affects Gallery 1.3.3, where directories are created with insecure permissions, allowing local users to read, modify, or delete photos. The provided documents state the insecure permissions as the root cause; no exploit details or fixed version are documented here. References are li...

4.8CVSS6.7AI score0.00505EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder