CVE-2006-6093

Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attackers to execute arbitrary PHP code via a URL in the 1 adminfolder and 2 path parameters...

CVE-2006-6093

CVE-2006-6093 affects PicturesPro Photo Cart 3.9. The flaw is in adminprint.php where remote PHP code execution is possible via a URL in the (1) admin_folder and (2) path parameters, exploiting PHP remote file inclusion. CVSS v2 base score 7.5 (HIGH) driven by network access, low attack complexit...

Photo Cart 3.9 (adminprint.php) Remote File Include Vulnerability

No description provided by source. PhotoCart 3.9 adminprint.php Remote File Include Vulnerability Script site: http://www.picturespro.com/store/programs/129-photocart.html Dork : inurl :/PhotoCart/ Bug Found By : irvian GreetZ: jipank,kacung,trangkil,ibnusina,cah|gemblunkz,zoid Special greetz:...

Photo Cart 3.9 (adminprint.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= Photo Cart 3.9 adminprint.php Remote File Include Vulnerability ================================================================= PhotoCart 3.9 adminprint.php Remote File...

Photo Cart 3.9 - 'adminprint.php' Remote File Inclusion

PhotoCart 3.9 adminprint.php Remote File Include Vulnerability Script site: http://www.picturespro.com/store/programs/129-photocart.html Dork : inurl :/PhotoCart/ Bug Found By : irvian GreetZ: jipank,kacung,trangkil,ibnusina,cah|gemblunkz,zoid Special greetz: patihack hitamputih nyubicrew bug fou...

Photo Cart 3.9 - adminprint.php Remote File Inclusion

Photo Cart 3.9 - adminprint.php Remote File Inclusion PhotoCart 3.9 adminprint.php Remote File Include Vulnerability Script site: http://www.picturespro.com/store/programs/129-photocart.html Dork : inurl :/PhotoCart/ Bug Found By : irvian GreetZ: jipank,kacung,trangkil,ibnusina,cah|gemblunkz,zoid...

xtremeg.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/xtremeg.txt ----------------------------------------------------------- Software: Xtreme ASP Photo Gallery Method : Cross Site Scripting And SQL Injection PoC:...

Xtreme ASP Photo Gallery Cross Site Scripting And SQL Injection

Aria-Security Team Advisory www.Aria-security.Com For English www.Aria-Security.net For Persian Original Advisory : http://aria-security.net/advisory/xtremeg.txt ----------------------------------------------------------- Software: Xtreme ASP Photo Gallery Method : Cross Site Scripting And SQL...

Xtreme ASP Photo Gallery 2.0 - displaypic.asp?sortorder SQL Injection

Xtreme ASP Photo Gallery 2.0 - displaypic.asp?sortorder SQL Injection source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because th...

Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?catname' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly sanitize user-supplied input. Successf...

Xtreme ASP Photo Gallery 2.0 - 'displaypic.asp?sortorder' SQL Injection

source: https://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly sanitize user-supplied input. Successf...

уязвимости Simple Photo Album - 1.2 и 2.5

Software: Simple Photo Album - 1.2 и 2.5 Vendor: www.gieson.com Vulnerability: получение удаленным пользователем файла с хешем администратора Simple Photo Album в 1.2 и 2.5, возможность редактирования фотоальбома в обход авторизации, загрузка произвольных файлов - версия 1.2. Risk: высокий Date:...

CVE-2006-5622

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2006-5622

SQL injection vulnerability in picmgr.php in Coppermine Photo Gallery 1.4.9 allows remote attackers to execute arbitrary SQL commands via the aid parameter...

CVE-2006-5622

CVE-2006-5622 affects Coppermine Photo Gallery 1.4.9, where SQL injection is possible in picmgr.php via the aid parameter. This could allow remote attackers to execute arbitrary SQL commands. The provided documents do not specify a fixed version patch or remediation, and exploitation details are ...

Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability

No description provided by source. !/usr/bin/php ?php / Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability Note: Requires a valid user account. Usage: php script.php host path table prefix user id username password Usage Example: php script.php domain.com /coppermine/ cpg149 1 john...

Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= Coppermine Photo Gallery 1.4.9 Remote SQL Injection Vulnerability ================================================================= !/usr/bin/php ?php / Coppermine Photo...

CVE-2006-5320

Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter...

CVE-2006-5320

Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter...

CVE-2006-5320

Summary: Affected software: Album Photo Sans Nom 1.6. Vulnerable component: getimg.php. Root cause: directory traversal via the img parameter, enabling remote attackers to read arbitrary files. Impact: confidentiality risk (read access). No remediation details are provided in the supplied documen...