Original inc/exif.inc.php exif_prog Parameter Arbitrary Command Execution

Original photo gallery, a PHP-based photo gallery, is installed on the remote host. The version of Original photo gallery on the remote host fails to sanitize input to the 'exifprog' parameter of the 'inc/exif.inc.php' script before using it in an 'exec' statement to execute a command. Provided...

Unfixed XSS vulnerability at photo.alanaandshawn.com

Security researcher Narcoticxs, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting photo.alanaandshawn.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Microsoft MFC库CFileFind::FindFile缓冲区溢出漏洞

Microsoft Windows是一款流行的操作系统。 Microsoft Windows包含的MFC库处理CFileFind::FindFile方法存在缓冲区溢出，远程攻击者可以利用漏洞以链接此库的应用程序权限执行任意指令。 问题存在于MFC库包含的FindFile函数中，FindFile函数管理垮文件系统文件搜索，可指定文件类型进行搜索。FindFile函数为buffer1分配内存，buffer1用于存储function2的第一个参数，而没有对其大小进行检查。这个数据用于开始一个搜索。...

Microsoft MFC FindFile function heap buffer overflow

Overview A buffer overflow vulnerability in the Microsoft Foundation Class MFC Library could allow an attacker to execute arbitrary code on an affected system. Description The Microsoft Foundation Class MFC Library is a Microsoft library that wraps parts of the Windows API in C++ classes. The MFC...

CVE-2007-4976

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the log parameter...

Directory traversal

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the log parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in mode.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter...

CVE-2007-4977

Cross-site scripting XSS vulnerability in mode.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote attackers to inject arbitrary web script or HTML via the referer parameter...

CVE-2007-4977

CVE-2007-4977 concerns Coppermine Photo Gallery (CPG) prior to (and including) 1.4.12. The issue is an XSS in mode.php via the referer parameter, as described in the CVE entry and echoed in connected reports. The root cause is improper checking of the referer variable in mode.php, enabling inject...

CVE-2007-4976

CVE-2007-4976 involves a directory traversal in Coppermine Photo Gallery (CPG) prior to or including 1.4.12. The flaw is in viewlog.php: an unsafely handled log parameter can be exploited to include and execute arbitrary local files by using ".." (dot dot). The vulnerability requires authenticati...

CVE-2007-4976

Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery CPG 1.4.12 and earlier allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the log parameter...

Coppermine <= 1.4.12 Cross Site Scripting and Local File Inclusion

============================================================ Coppermine = 1.4.12 Cross Site Scripting and Local File Inclusion ============================================================ Author: L4teral l4teral 4t gmail com Impact: Cross Site Scripting/Local File Inclusion Status: patch availabl...

CVE-2007-0326

Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as used by multiple retailers, allow remote attackers to execute arbitrary code via unspecified vectors...

coppermine1412-xss.txt

============================================================ Coppermine Impact: Cross Site Scripting/Local File Inclusion Status: patch available ------------------------------ Affected software description: ------------------------------ Application: Coppermine Photo Gallery Version: = 1.4.12...

Photo Upload Plugin ActiveX控件多个缓冲区溢出漏洞

BUGTRAQ ID: 25685 CVECAN ID: CVE-2007-0326 Photo Upload Plugin ActiveX控件允许用户使用Internet Explorer上传数码相片。 Photo Upload Plugin ActiveX控件中存在多个缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 如果用户受骗浏览了恶意的HTML文档的话，就可能触发这些溢出，导致以当前用户的权限执行任意指令或浏览器崩溃。 PhotoChannel Networks Inc Photo Upload Plugin 2.0.0.9 临时解决方法： 在IE中禁用Photo...

Coppermine Photo Gallery 1.4.12 - log Local File Inclusion

Coppermine Photo Gallery 1.4.12 - log Local File Inclusion source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials,...

Coppermine Photo Gallery 1.4.12 - 'referer' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within...

Coppermine Photo Gallery 1.4.12 - referer Cross-Site Scripting

Coppermine Photo Gallery 1.4.12 - referer Cross-Site Scripting source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials...

Coppermine Photo Gallery 1.4.12 - 'log' Local File Inclusion

source: https://www.securityfocus.com/bid/25698/info Coppermine Photo Gallery is prone to a cross-site scripting issue and a local file-include issue. Attackers can exploit these issues to steal cookie-based authentication credentials, execute arbitrary code, and retrieve arbitrary content within...

[SECURITY] Fedora 7 Update: qtpfsgui-1.8.12-1.fc7

Qtpfsgui is a graphical program for assembling bracketed photos into High Dynamic Range HDR images. It also provides a number of tone-mapping operators for creating low dynamic range versions of HDR images...