8052 matches found
Coppermine Photo Gallery 1.4.18 - Local File Inclusion Remote Code Execution
Coppermine Photo Gallery 1.4.18 - Local File Inclusion Remote Code Execution authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is utf-8 303. if !empty$GET'lang' 304. 305. $USER'lang' = ereg"^a-z0-9-$",...
Coppermine Photo Gallery 1.4.18 - Local File Inclusion / Remote Code Execution
authenticate; ... 301. // Process language selection if present in URI or in user profile or try 302. // autodetection if default charset is utf-8 303. if !empty$GET'lang' 304. 305. $USER'lang' = ereg"^a-z0-9-$", $GET'lang' ? $GET'lang' : $CONFIG'lang'; 306. 307. 308. if isset$USER'lang' &&...
[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-12.fc8
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-11.fc8
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
Xpoz SQL-INJECTION, XSS.
Xpoz SQL-INJECTION, XSS. Application: Xpoz PRO Expoze Photo Store ------------ Website: http://xpoze.org -------- Version: Allcurrent 1.0 -------- About: ------ Xpoze is a photo store very easy to use, yet having lots of features to help buyers and sellers to find or sell images after their needs...
SebracCMS 0.4 - Multiple SQL Injections
Name: SebracCMS Webiste: http://www.sebrac.netsons.org/cms/ Vulnerability type: SQL Injection Author: shinmai, 2008-06-28 Description: SebracCMS contains two major SQL injection vulnerabilities: Unsanitazed POST-variables in SQL queries when logging users in. This allows login access without prop...
Unfixed XSS vulnerability at www.cogitatio.net
Security researcher IHZTEAM, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.cogitatio.net, which at the time of submission ranked 7185613 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/10/2008. It is...
[SECURITY] Fedora 7 Update: tkimg-1.3-0.8.20080505svn.fc7
This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps. The provided format handlers include bmp, gif, ico, jpeg, pcx, png, ppm, ps, sgi, sun, tga, tiff, xbm, and xpm...
Ktools Photostore 3.5.2 - Multiple SQL Injections
Ktools Photostore 3.5.2 - Multiple SQL Injections '/ -.- -------------------------oOO------OOo------------------------- | Ktools Photostore = v3.5.2 crumbs.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX |...
Ktools Photostore 3.5.2 - Multiple SQL Injections
'/ -.- -------------------------oOO------OOo------------------------- | Ktools Photostore = v3.5.2 crumbs.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX | ----------------------------------------------------------------- ! Discovered.: DNX ! Vendor.....:...
wpgallery-sql.txt
Script: Wordpress Photo Gallery Mod SQL Injection Dork: allinurl:"/plugins/wppa/" Bug Fount : THEMILLER msn : themilleratlinuxmaildotorg ExpLoit : 1Randomsite.com/photos/?album=1&photo=-11111+union+select+concatuserlogin,char45,userpass+from+wpusers-- 2Randomsite.com/?pageid=gallery...
WordPress Plugin WP Photo Album - photo SQL Injection
WordPress Plugin WP Photo Album - photo SQL Injection source: https://www.securityfocus.com/bid/29148/info The WordPress WP Photo Album WPPA plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...
WordPress Plugin WP Photo Album - 'photo' SQL Injection
source: https://www.securityfocus.com/bid/29148/info The WordPress WP Photo Album WPPA plugin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== MegaBBS Forum 2.2 SQL/XSS Multiple Remote Vulnerabilities =========================================================== AmnPardaz Security Research Team Title: MegaBBS Forum Multipl...
MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities
No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Descriptio...
Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting
www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Description: A complete, fully featured ASP...
Coppermine <=1.4.17 SQL-inj Session Hijack Exploit
Coppermine =1.4.17 SQL-inj Session Hijack Exploit 1 Дата: Пропатчена: April 11, 2008 http://forum.coppermine-gallery.net/index.php/topic,51882.0.html 2 Продукт: Coppermine Photo Gallery =1.4.17 3 Уязвимость: SQL-инъекция в $COOKIE$this-clientid в /bridge/coppermine.inc.php Значение извлекается из...
[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-10.fc8
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
Sql injection
SQL injection vulnerability in index.php in Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the photoid parameter...
