Unfixed XSS vulnerability at celebritypicturehouse.com

Security researcher viperfx07, has submitted on 18/06/2008 a cross-site-scripting XSS vulnerability affecting celebritypicturehouse.com, which at the time of submission ranked 105383 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. I...

CVE-2008-1888

Cross-site scripting XSS vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source aka picture object source field in the Rich Text Editor...

Cross site scripting

Cross-site scripting XSS vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source aka picture object source field in the Rich Text Editor...

CVE-2008-1888: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source aka picture object source field in the Rich Text Editor...

picturerating-blindsql.txt

!/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in has admin you can upload a shell, click...

Picture Rating 1.0 - Blind SQL Injection

Picture Rating 1.0 - Blind SQL Injection !/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After running this perl script, you will have admin details therefore you will be able to login to the admin area at http://site.com/control/ ok once you have logged in...

Picture Rating 1.0 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================== Picture Rating 1.0 Blind SQL Injection Exploit ============================================== !/usr/bin/perl -- Picture Rating 1.0 Blind SQL Injection Exploit -- -Info/Instructions- After...

Joomla! Component MyAlbum 1.0 - album SQL Injection

Joomla! Component MyAlbum 1.0 - album SQL Injection ------------------------------------------------------------------------------------------------- Title : Joomla Component MyAlbum SQL Injection Vulnerability Author : parad0x D.Page : http://joomlacode.org/gf/project/myalbum/...

joomlamyalbum-sql.txt

------------------------------------------------------------------------------------------------- Title : Joomla Component MyAlbum SQL Injection Vulnerability Author : parad0x D.Page : http://joomlacode.org/gf/project/myalbum/...

Minigal 2 critical XSS

Title: Minigal 2 critical XSS Author: Jose Carlos Norte [email protected] Date: 4-3-2008 Severity: high Vendor URL: http://www.minigal.dk/ ------- Introduction Minigal 2a.k.a. MG2 is a picture album written in PHP, it have a simple administration panels, and makes non-ajax browsable albums. -------...

freePHPgallery 0.6 Cookie Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================ freePHPgallery 0.6 Cookie Local File Inclusion Vulnerability ============================================================...

freePHPgallery 0.6 - Cookie Local File Inclusion

freePHPgallery 0.6 - Cookie Local File Inclusion --==+================================================================================+==-- --==+ freePHPgallery 0.6 Cookie Local File Inclusion +==-- --==+================================================================================+==-- Author:...

freePHPgallery 0.6 Cookie Local File Inclusion Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ freePHPgallery 0.6 Cookie Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title:...

freePHPgallery 0.6 - Cookie Local File Inclusion

--==+================================================================================+==-- --==+ freePHPgallery 0.6 Cookie Local File Inclusion +==-- --==+================================================================================+==-- Author: MhZ91 Title: freePHPgallery 0.6 Cookie Local Fil...

CVE-2007-6699

Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures YGP Picture Editor allow remote attackers to cause a denial of service browser crash via a long string in the 1 DisplayName, 2 FinalSavePath, 3 ForceSaveTo, 4 HiddenControls, 5...

CVE-2007-6699

CVE-2007-6699 concerns multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control (YGPPicEdit.dll) used by AOL You've Got Pictures (YGP) Picture Editor. The vulnerability arises from handling long string values in specific properties (DisplayName, FinalSavePath, ForceSaveTo, HiddenCon...

Mambo Component com_akogallery 2.5b - SQL Injection

Mambo Component comakogallery 2.5b - SQL Injection joomla SQL Injectioncomakogallery AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DorKs 1 : allinurl: "comakogallery" EXPLOIT :...

Coppermine Photo Gallery 1.4.14 - Remote Command Execution

waraxe-2008-SA065 - Remote Shell Command Execution in Coppermine 1.4.14 =============================================================================== Author: Janek Vind "waraxe" Date: 30. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-65.html Target software descriptio...

Powerful HA1 through Microsoft signatures-vulnerability and early warning-the black bar safety net

No HOOK, do not replace the file, get to a clean system to check the signature, too All the tools are the same as Microsoft, SRE, sysinternals, large into the Directly display the signature of the publisher is Microsoft Windows Publisher Points come in to see the big picture Technology is too...

Debian Security Advisory DSA 1038-1 (xzgv)

The remote host is missing an update to xzgv announced via advisory DSA 1038-1. Andrea Barisani discovered that xzgv, a picture viewer for X with a thumbnail-based selector, attempts to decode JPEG images within the CMYK/YCCK colour space incorrectly, which could lead to the execution of arbitrar...