Photogallery Project 1.0 - SQL Injection

Exploit Title: Photogallery Project 1.0 - Multiple Vulnerabilities Dork: N/A Date: 17.08.2017 Vendor Homepage : http://surajkumar.in/ Software Link: http://surajkumar.in/product/photogallery-project-in-php/ Demo: http://surajkumar.in/ Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64...

easytoursofindia.com XSS vulnerability

Open Bug Bounty ID: OBB-222820 Description| Value ---|--- Affected Website:| easytoursofindia.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

lulichauction.com XSS vulnerability

Vulnerable URL: http://lulichauction.com/photogallery.php?Id=7"';-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 16434636 VIP website status:| No Check lulichauction.com SSL...

XtremeASP PhotoGallery 2.0 Adminlogin.ASP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/9438/info XtremeASP PhotoGallery is prone to an SQL injection vulnerability. The issue is reported to exist in the administration login interface, which does not sufficiently sanitize user-supplied input for username and...

Site by Webrevelation SQL Injection Vulnerability

=========================================================== Site by Webrevelation SQL Injection Vulnerability =========================================================== :-----------------------------------------------------------------------------------------------------------------------: :...

Rcsindia - SQL Injection Vulnerability

Exploit for php platform in category web applications 1=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1...

ValtNet (photogallery.html?id_categoria) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability ValtNet photogallery.html?idcategoria AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.valtnet.com/ Persian Gulf 4 Ever! Dork : allinurl:"photogallery.html?idcategoria="...

ValtNet SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability ValtNet photogallery.html?idcategoria AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.valtnet.com/ Persian Gulf 4 Ever! Dork : allinurl:"photogallery.html?idcategoria="...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: Photogallery cegallery, SEO Photogallery by Evorion evgallery Release Date: June 14, 2011 Please read first: This Collective Security Bulletin CSB is a listing of vulnerable extensions with neither significant...

Simple Gallery ASP Script SQL Injection Vulnerability

Exploit for asp platform in category web applications ===================================================== Simple Gallery ASP Script SQL Injection Vulnerability ===================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Heaven Soft CMS 4.7 SQL Injection

------------------------------------------------------------------------------------------- Heaven Soft CMS v 4.7 photogalleryopen.php SQL Injection Vulnerability ------------------------------------------------------------------------------------------- Author: CoBRa21 Mail: [email protected]...

Phormer PhotoGallery 3.3.1 Insecure Cookie

Exploit Code : Phormer PhotoGallery 3.3.1 Insecure Cookie Handling Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc Mail : [email protected] script : http://p.horm.org/er DorK:"This PhotoGallery is powered by Phormer" exploiT: go to admin page www.site.com/admin.php exploiT...

Unfixed XSS vulnerability at www.sykesvilleandpatapscorailway.org

Security researcher Narcoticxs, has submitted on 25/09/2007 a cross-site-scripting XSS vulnerability affecting www.sykesvilleandpatapscorailway.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

doopCMS13x-xss.txt

Doop Content Management System 1.3.x Exploit Author: KaBuS alertdocument.cookie;alert/xss/; Text: alertdocument.cookie;alert/xss/; Name or nick: alertdocument.cookie;alert/xss/; e-mail: alertdocument.cookie;alert/xss/; send. and refresh page .. Attack 2 : http://site/path/?page=vdasCMS New Commen...

CVE-2006-5627

Multiple PHP remote file inclusion vulnerabilities in QnECMS 2.5.6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the adminfolderpath parameter to 1 headerscripts.php, 2 footerhome.php, and 3 footermain.php in admin/include/; 4 photogallery/headerscripts.php; and 5...

CVE-2006-5627

CVE-2006-5627 affects QnECMS up to version 2.5.6, where multiple PHP remote file inclusion vulnerabilities exist. An attacker can supply a URL via the adminfolderpath parameter to files under admin/include/ (headerscripts.php, footerhome.php, footermain.php) and templates/ (headerscripts.php, foo...

CVE-2005-3160

Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the 1 album and 2 photo parameters...

XtremeASP PhotoGallery 2.0 - 'Adminlogin.asp' SQL Injection

source: https://www.securityfocus.com/bid/9438/info XtremeASP PhotoGallery is prone to an SQL injection vulnerability. The issue is reported to exist in the administration login interface, which does not sufficiently sanitize user-supplied input for username and password values before including i...