SpitFire Photo Pro - 'pages.php' SQL Injection

source: https://www.securityfocus.com/bid/32012/info SpitFire Photo Pro is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...

MindDezign Photo Gallery 2.2 (index.php id) SQL Injection Vulnerability

No description provided by source. ================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ==================================================================================...

MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit

No description provided by source. !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | ...

Exhibit Engine toroot Parameter Remote File Include Vulnerability

The remote web server running Exhibit Engine, a PHP based photo gallery management system which is affected by a remote file include issue. SPDX-FileCopyrightText: 2008 Justin Seitz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

CVE-2008-4714

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

Authentication flaw

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

CVE-2008-4714

CVE-2008-4714 affects Atomic Photo Album 1.1.0 pre4, where improper handling of the apa_cookie_login and apa_cookie_password cookies can allow remote attackers to bypass authentication and gain administrative access by modifying cookies. The vulnerability is documented in multiple sources (NVD en...

CVE-2008-4714

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

MindDezign Photo Gallery 2.2 - SQL Injection

================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

!/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground...

minddezignpg-sql.txt

================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ================================================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit

Exploit for unknown platform in category web applications ======================================================== MindDezign Photo Gallery 2.2 Arbitrary Add Admin Exploit ======================================================== !/usr/bin/perl...

MindDezign Photo Gallery 2.2 (index.php id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= MindDezign Photo Gallery 2.2 index.php id SQL Injection Vulnerability =======================================================================...

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin

MindDezign Photo Gallery 2.2 - Arbitrary Add Admin !/usr/bin/perl ============================================================= MindDezign Photo 2.2 Gallery Arbitrary Add Admin Exploit ============================================================= ,--^----------,--------,-----,-------^--, |...

MindDezign Photo Gallery 2.2 - SQL Injection

MindDezign Photo Gallery 2.2 - SQL Injection ================================================================================== MindDezign Photo Gallery 2.2 index.php id Remote SQL Injection Vulnerability ==================================================================================...

CVE-2008-4714: Improper Authentication

Atomic Photo Album 1.1.0 pre4 does not properly handle the apacookielogin and apacookiepassword cookies, which probably allows remote attackers to bypass authentication and gain administrative access via modified cookies...

CVE-2008-4626

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

CVE-2008-4626

The CVE-2008-4626 issue affects yappa-ng (Fritz Berger yet another php photo album) paired with PHP. A Local File Inclusion vulnerability exists in index.php: when magic_quotes_gpc is disabled, the album parameter can cause the script to include and potentially execute local files. Affected versi...

CVE-2008-4626: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 and possibly other versions through 2.3.3-beta0, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in th...

ifoto-disclose.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- iFoto, CSS-based GD2 photo gallery eNYe-Sec - www.enye-sec.org -- Description by the author's page -- This is yet another Web-based PHP photo gallery called, iFoto. iFoto use 90% CSS-based layout and can be customize ...