CVE-2007-1414

Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery CPG allow remote attackers to execute arbitrary PHP code via a URL in the 1 cmd parameter to a imageprocessor.php or b picmgmt.inc.php, or the 2 path parameter to c include/functions.php, d include/pluginapi.inc.php, e...

CVE-2007-1414

The CVE-2007-1414 issue affects Coppermine Photo Gallery (CPG). Multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code by supplying URLs in the affected parameters: (1) cmd in image_processor.php or picmgmt.inc.php, and (2) path in include/functions.php...

Remote File Include In Script PHP Photo Album

By Hasadya Raed Contact : [email protected] ------------------------------------------------------------------------------------- Script : PHP Photo Album Dork : "Powered by PHP Photo Album" ------------------------------------------------------------------------------------- B.File : common.php...

Remote File Include In Script Coppermine Photo Gallery

By Hasadya Raed Contact : [email protected] ------------------------------------ Script : Coppermine Photo Gallery Expl : Remote Include File Dork : "Copyright c 2003-2006 Coppermine Dev Team" ------------------------------------ B.Files : imageprocessor.php functions.php picmgmt.inc.php...

Coppermine Photo Gallery 1.3.x Remote Blind SQL Injection Exploit

No description provided by source. "; $j = 1; $user = ""; while!strstr$user,chr0 for$x=0;$x255;$x++ $xpl = "'' OR 1=SELECT IFASCIISUBSTRINGusername,".$j.",1=".$x.",1,0 FROM&...

coppermine-blindsql.txt

"; $j = 1; $user = ""; while!strstr$user,chr0 for$x=0;$x "; $a = 1; $pass = ""; while!strstr$pass,chr0...

Sql injection

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery CPG 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies...

CVE-2007-1107

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery CPG 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies...

CVE-2007-1107

Coppermine Photo Gallery (CPG) 1.3.x is vulnerable to a SQL injection via the cpg131_fav cookie, allowing remote authenticated users to execute arbitrary SQL commands. The issue was later reported to affect 1.4.x versions (e.g., 1.4.10, 1.4.14) using similar cookies. A Nessus entry additionally n...

CVE-2007-1107

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery CPG 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies...

Coppermine Photo Gallery 1.3.x - Blind SQL Injection

"; $j = 1; $user = ""; while!strstr$user,chr0 for$x=0;$x "; $a = 1; $pass = ""; while!strstr$pass,chr0 for$i=0;$i255;$i++ $xpl = "'' OR 1=SELECT IFASCIISUBSTRINGuserpassword,".$a...

CVE-2006-7043

Multiple cross-site scripting XSS vulnerabilities in Chipmunk Blogger allow remote authenticated users to inject arbitrary web script or HTML via script tags in 1 posts and 2 profile names; and 3 a javascript URI in a URL argument in the photo gallery...

CVE-2007-0835

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters ";" semicolon in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE:...

Path traversal

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the 1 "Path to custom header include" and 2 "Path to custom footer include" form fields. NOTE: The provenance of this information is...

CVE-2007-0836

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the 1 "Path to custom header include" and 2 "Path to custom footer include" form fields. NOTE: The provenance of this information is...

CVE-2007-0835

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands via shell metacharacters ";" semicolon in the "Command line options for ImageMagick" form field, when used as an option to ImageMagick's convert command. NOTE:...

CVE-2007-0835

The CVE-2007-0835 entry applies to Coppermine Photo Gallery 1.4.10 (and possibly earlier). It describes a remote command-injection vulnerability where an authenticated user can execute arbitrary shell commands by injecting shell metacharacters (a semicolon) into the ImageMagick-related input fiel...

CVE-2007-0836

admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibly remote files via the 1 "Path to custom header include" and 2 "Path to custom footer include" form fields. NOTE: The provenance of this information is...

CVE-2007-0836

CVE-2007-0836 affects Coppermine Photo Gallery 1.4.10 (and possibly earlier). The issue allows remote authenticated users to include arbitrary local and possibly remote files through the “Path to custom header include” and “Path to custom footer include” fields in admin.php. The underlying flaw i...

Sql injection

SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...