PJBLOG photo album plug-in there is a serious vulnerability-a vulnerability warning-the black bar safety net

Continue the Halo one! The want to get hold of a PJ album plug-in to play, did not expect to pass up, vulnerability is I found. The following I listed in the vulnerability details. -------------------------------------------------- Software name: PJBLOG album plug-in V2. 0 Wizard full version...

ACDSee XPM file handling buffer overflow

Added: 05/10/2007 CVE: CVE-2007-2193 BID: 23620 OSVDB: 35236 Background ACDSee is a suite of products for viewing and organizing photos. Problem A buffer overflow vulnerability in the IDX.apl plug-in allows command execution when a user opens a specially crafted XPM file. Resolution Apply a fix...

Multiple Image Editing Applications .PNG Format Handling Remote Buffer Overflow Vulnerability

Description Multiple image editors are prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Successful exploits allow remote attackers to execute arbitrary machine code i...

CVE-2007-2209

Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted .CLP file. NOTE: some details were obtained from third party source...

CVE-2007-2209

A concrete vulnerability described across multiple sources: Buffer overflow in igcore15d.dll versions 15.1.2.0 and 15.2.0.0 used by AccuSoft ImageGear, including Corel Paint Shop Pro Photo 11.20, may allow user-assisted remote code execution via a crafted .CLP file. The underlying issue is a buff...

Corel Paint Shop Pro Photo 11.20 - .clp Local Buffer Overflow

Corel Paint Shop Pro Photo 11.20 - .clp Local Buffer Overflow / Corel Paint Shop Pro Photo v11.20 Unspecified .CLP File Buffer Overflow By opening a specially crafted file, SEH can be overwritten which makes code execution possible. This sploit runs calc.exe or binds to port 4444. Tested against...

Corel Paint Shop Pro Photo 11.20 - '.clp' Local Buffer Overflow

/ Corel Paint Shop Pro Photo v11.20 Unspecified .CLP File Buffer Overflow By opening a specially crafted file, SEH can be overwritten which makes code execution possible. This sploit runs calc.exe or binds to port 4444. Tested against Win XP SP2 FR. Have Fun! Coded and discovered by Marsu / inclu...

Corel Paint Shop Pro Photo 11.20 (.CLP File) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================================== Corel Paint Shop Pro Photo 11.20 .CLP File Buffer Overflow Exploit ==================================================================== / Corel Paint Shop Pro Photo v11.20...

Integer overflow

Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp...

CVE-2007-1943

Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp...

CVE-2007-1943

Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp...

CVE-2007-1943

CVE-2007-1943 affects ACDSee Photo Manager 9.0, where an integer overflow occurs while processing BMP images with large widths. This context-dependent vulnerability can cause a denial of service and potentially allow arbitrary code execution, as demonstrated by crafted BMP files (e.g., w3intof.bm...

ACDSee 9.0 Photo Manager - Multiple '.BMP' Denial of Service Vulnerabilities

// source: https://www.securityfocus.com/bid/23317/info ACDSee 9.0 Photo Manager is prone to multiple denial-of-service vulnerabilities because the application fails to properly handle malformed BMP image files. Successfully exploiting these issues allows attackers to crash the affected...

Active Photo Gallery Remote SQL Injection Vulnerability

Title : Active Photo Gallery Remote SQL Injection Vulnerability Author : CyberGhost My Web Site : http://aspspider.org/cgsecurity Demo Page : http://www.activewebsoftwares.com/demoactivephotogallery Script Page : http://www.activewebsoftwares.com/productinfo.aspx?productid=11 Vuln. Username :...

Remote File Include In Coppermine Photo Gallery

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Dork : Copyright c 2003-2006 Coppermine Dev Team ------------------------------------ B.Files : processor.php include/functions.php include/picmgmt.inc.php include/pluginapi.inc.php...

cpg-rfi.txt

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Dork : Copyright c 2003-2006 Coppermine Dev Team ------------------------------------ B.Files : processor.php include/functions.php include/picmgmt.inc.php include/pluginapi.inc.php...

CVE-2007-1629

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2007-1629

The CVE-2007-1629 entry concerns Active Web Softwares’ Active Photo Gallery. Affected component: default.asp in Active Photo Gallery. Root cause: SQL injection via the catid parameter, allowing remote execution of arbitrary SQL commands. Impact as stated: attacker could manipulate database conten...

CVE-2007-1629

SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Sql injection

SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter...