6595 matches found
Magic Photo Storage Website - adminadd_welcome_text.php?_config[site_path] Remote File Inclusion
Magic Photo Storage Website - adminaddwelcometext.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data...
Magic Photo Storage Website - useradd_news.php?_config[site_path] Remote File Inclusion
Magic Photo Storage Website - useraddnews.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting the...
Magic Photo Storage Website - adminadd_templates.php?_config[site_path] Remote File Inclusion
Magic Photo Storage Website - adminaddtemplates.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiti...
Magic Photo Storage Website - includedb_config.php?_config[site_path] Remote File Inclusion
Magic Photo Storage Website - includedbconfig.php?configsitepath Remote File Inclusion source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting...
Magic Photo Storage Website - '/admin/admin_password.php?_config[site_path]' Remote File Inclusion
source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...
Axiom Photo/News Gallery 0.8.6 - Remote File Inclusion
!/usr/bin/perl Axiom 0.8.6 photo gallery template.phpRemote File Include Vulnerability Bug Found : DeltahackingTEAM discovery:Dr.Pantagon & Exploitet By Dr.Trojan Class: Remote File Include Vulnerability exemplary Exp: http://www.site.com/template.php?baseAxiomPath= Remote: Yes Type: Highly criti...
Magic Photo Storage Website - '/admin/delete_member.php?_config[site_path]' Remote File Inclusion
source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...
Magic Photo Storage Website - '/user/couple_profile.php?_config[site_path]' Remote File Inclusion
source: https://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...
Coppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php ?php if$argc 4 print "\n---------------------------------------------------------"; print "\nAffected.scr..: Coppermine Photo Gallery = 1.4.10"; print "\nPoc.ID........: 19070104"; print "\nType..........: SQL Injection"; print "\nRisk.level....:...
Coppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== Coppermine Photo Gallery "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print...
Coppermine Photo Gallery 1.4.11 - SQL Injection
Coppermine Photo Gallery 1.4.11 - SQL Injection source: https://www.securityfocus.com/bid/21894/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit cou...
Coppermine Photo Gallery 1.4.10 - xpl.php SQL Injection
Coppermine Photo Gallery 1.4.10 - xpl.php SQL Injection !/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = roo...
Coppermine Photo Gallery 1.4.11 - SQL Injection
source: https://www.securityfocus.com/bid/21894/info Coppermine Photo Gallery is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Coppermine Photo Gallery 1.4.10 - 'xpl.php' SQL Injection
!/usr/bin/php "; print "\nProxyOptions..: "; print "\nExample.......: php xpl.php http://c.com/ admin passwd"; print "\n---------------------------------------------------------\n"; exit1; // 0 = xpl.php 1 = http://localhost/cpg1410/ 2 = root 3 = toor 4 = localhost:8200 5 = user:passwd //...
CVE-2007-0051
Format string vulnerability in Apple iPhoto 6.0.5 316, and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a crafted photocast with format string specifiers in the title of an RSS iPhoto feed...
eXtreme-fusion 4.02 - 'Fusion_Forum_View.php' Local File Inclusion
source: https://www.securityfocus.com/bid/21621/info eXtreme-fusion is prone to a local file-include vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized user to view files and execute local scripts. By combining thi...
phpAlbum <= v0.4.1 Beta6 Remote Code Execution Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...
[SA23286] Newtone ImageKit ActiveX Control Unspecified Buffer Overfow
TITLE: Newtone ImageKit ActiveX Control Unspecified Buffer Overfow SECUNIA ADVISORY ID: SA23286 VERIFY ADVISORY: http://secunia.com/advisories/23286/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Photo Loader 3.x http://secunia.com/product/12847/ ImageKit 6.x...
Coppermine Photo Gallery Theme.PHP远程文件包含漏洞
Coppermine Photo Gallery是一款基于PHP的图片管理程序。 Coppermine Photo Gallery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是'theme.php'脚本对用户提交的"THEMEDIR"参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Coppermine Photo Gallery 1.2.2 b-Nuke http://coppermine-gallery.net/index.php...
CVE-2006-6246
Photo Organizer 2.32b and earlier does not properly check the ownership of certain objects, which allows remote attackers to gain unauthorized access via vectors related to 1 camera del, 2 camera edit, 3 folder/album deletion, 4 photo.move, 5 content.indexer, 6 folder.content, and possibly other...