6595 matches found
LinPHA <= 1.1 Multiple Vulnerabilities
Binary data 3426.prm...
Sql-инъекция и межсайтовый скриптинг в Plogger Photo Gallery
Здравствуйте, 3APA3A. свежая порция: Software: Plogger Photo Gallery = 2.1 Vendor: Plogger www.plogger.org Vulnerability: Sql-инъекция и межсайтовый скриптинг Risk: средний Date: 10.01.2006 discovered by durito -duritoatmaildotru- HTTP: all-about-all.net durito.narod.ru +:| Details |: Уязвимость...
Plogger SQL&XSS vuln.
Plogger SQL&XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plogger-sqlxss-vuln.html vendor:http://www.plogger.org/ affected version:Beta 2 and prior Product Description: Plogger is the definitive open-source web photo gallery. Simple to...
CVE-2005-3986
Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter in portfolio.php and 2 cid parameter in content.php...
CVE-2005-3986
This CVE (CVE-2005-3986) affects Instant Photo Gallery (version 1 and earlier). The vulnerability is SQL injection in two parameters: cat_id in portfolio.php and cid in content.php, allowing remote attackers to execute arbitrary SQL commands. The exploitation is described as remote and results in...
CVE-2005-3986
Multiple SQL injection vulnerabilities in Instant Photo Gallery 1 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter in portfolio.php and 2 cid parameter in content.php...
CVE-2005-3979
relocateserver.php in Coppermine Photo Gallery CPG 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request...
CVE-2005-3979
CVE-2005-3979 affects Coppermine Photo Gallery (CPG) versions 1.4.2 and 1.4 beta. The file relocate_server.php is not removed after installation and does not require authentication, enabling remote attackers to obtain sensitive information (e.g., database configuration) via a direct request. The ...
[SA17855] Coppermine Photo Gallery "relocate_server.php" Exposure of Configuration
TITLE: Coppermine Photo Gallery "relocateserver.php" Exposure of Configuration SECUNIA ADVISORY ID: SA17855 VERIFY ADVISORY: http://secunia.com/advisories/17855/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Coppermine Photo Gallery 1.x...
Gallery 2.x Security Advisory
Gallery is an open source web based photo album organizer. The 2.x is a newly released complete rewrite of the application. Url: http://gallery.menalto.com Contact: [email protected] An internal security audit turned up 3 separate vulnerabilities. These are all resolved in Gallery 2.0.2, releas...
Instant Photo Gallery SQL inj. vuln.
Instant Photo Gallery SQL inj. vuln. Vuln. dicovered by : r0t Date: 30 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html Vendor:http://www.instantphotogallery.com affected version:v1 and prior Product Description: Instant Photo Gallery is a new...
Instant Photo Gallery 1.0 - portfolio.php?cat_id SQL Injection
Instant Photo Gallery 1.0 - portfolio.php?catid SQL Injection source: https://www.securityfocus.com/bid/15659/info Instant Photo Gallery is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using i...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Coppermine Photo Gallery By DiGiTALMiDWAY import urllib2, sys from urllib import urlencode import zipfile iflensys.argv2: print 'usage : %s http://host/Path/...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
No description provided by source. tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good...
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use...
Coppermine Photo Gallery 1.3.2 - File Retrieval / SQL Injection
tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good cookie : By DiGiTALMiDWAY import...
Singapore MD5 Administrative Password Disclosure
Singapore is a PHP based photo gallery web application. Due to inaddequate security settings, the file used to stored the administrative password is easily accessible, and the MD5 with which the product protects the password is feasibably crackable. SPDX-FileCopyrightText: 2004 Noam Rathaus Some...
CVE-2005-3084
CVE-2005-3084 : Buffer overflow in the TIFF library used by the Photo Viewer for Sony PSP 2.0 firmware enables remote DoS via a crafted TIFF image. Affected software: PSP 2.0 Photo Viewer TIFF support. Exploitation details are not provided in the supplied documents. No remediation details are inc...
Coppermine Photo Gallery EXIF Data XSS
According to its banner, the version of Coppermine Gallery installed on the remote host is prone to cross-site scripting attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML...
CVE-2005-2676
The CVE-2005-2676 entry concerns Coppermine Photo Gallery prior to version 1.3.4, where displayimage.php is vulnerable to cross-site scripting via crafted EXIF data. The vulnerability allows an attacker-supplied EXIF payload to be reflected into the HTML/JS context, enabling arbitrary script exec...