1972 matches found
imagealbum-sql.txt
ImageAlbum Remote SQL Injection Vulnerabilities ------------------------------------------------------------------------- Product: ImageAlbum Version: Latest 2.0.0b2, others not tested Vendor: http://imagealbum.sourceforge.net/ Date: 01/10/08 - Introduction ImageAlbum is a web application written...
Directory traversal
Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. dot dot in the picture parameter...
CVE-2007-6620: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in include/images.inc.php in Joovili 2.x allows remote attackers to read arbitrary files via a .. dot dot in the picture parameter...
aolygp-overflows.txt
The AOL YGP Picture Editor ControlAIM PicEditor Control version 9.5.1.8 suffers from multiple exploitable buffer overflows in various properties. This object is marked safe for scripting. I have not tested other versions. PoC as follows: ---------------- function Check var s = 'A'; while s.length...
AOL AIM YGP Picture Editor ActiveX control buffer overflow
Buffer overflows in different properties...
[Full-disclosure] AOL YGP Picture Editor YGPPicEdit.dll Multiple Buffer Overflows
The AOL YGP Picture Editor ControlAIM PicEditor Control version 9.5.1.8 suffers from multiple exploitable buffer overflows in various properties. This object is marked safe for scripting. I have not tested other versions. PoC as follows: ---------------- !-- written by e.b. -- html head script...
AOL Picture Editor 'YGPPicEdit.dll' ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities
source: https://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. The issues stem from various buffer-overflow conditions. An attacker can exploit these issues by...
AOL Picture Editor YGPPicEdit.dll ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities
AOL Picture Editor YGPPicEdit.dll ActiveX Control 9.5.1.8 - Multiple Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/27026/info AOL Picture Editor 'YGPPicEdit.dll' ActiveX control is prone to multiple vulnerabilities that attackers can exploit to crash the application. T...
DEBIAN-CVE-2007-6277
Multiple buffer overflows in Free Lossless Audio Codec FLAC libFLAC before 1.2.1 allow user-assisted remote attackers to execute arbitrary code via large 1 Metadata Block Size, 2 VORBIS Comment String Size, 3 Picture Metadata MIME-TYPE Size, 4 Picture Description Size, 5 Picture Data Length, 6...
PHPCMS 2007 show_pic.inc.php本地包含漏洞
PHPCMS 网站管理系统是一个基于PHP+MYSQL的全站生成html的建站系统，经过完善设计并适用于各种服务器环境如UNIX、LINUX、WINDOWS等的高效、全新、快速、优秀的网站解决方案 showpic.inc.php 是否配置了src变量，如果有的话就把路径值赋给file。 这里src的类型没有判断。跳到根目录提交配置文件就可以读取数据库的连接密码了。 PHPCMS2007 官方暂时没有解决方案 http://www.phpcms.cn/ POST /picture/showpic.php?src=/../../../config.inc.php...
EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applications
Multiple Vulnerabilities In .FLAC File Format and Various Media Applications Release Date: November 15, 2007 Date Reported: September 28, 2007 Vendor Reporting Coordination Began With US-CERT Severity: High Remote Code Execution Vendor: Multiple Vendors Systems Affected: Applications with FLAC...
Remote file inclusion
PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer companoramic mambot plugin 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter. NOTE: the provenance of this information is unknown; the...
CVE-2007-5363
PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer companoramic mambot plugin 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter. NOTE: the provenance of this information is unknown; the...
CVE-2007-5363
CVE-2007-5363 affects the Panoramic Picture Viewer (com_panoramic) mambot 1.0 for Joomla!, with a PHP remote file inclusion vulnerability exploitable via the mosConfig_live_site parameter. The root cause is unsanitized user input allowing inclusion of arbitrary PHP code, enabling remote attackers...
CVE-2007-5363
PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer companoramic mambot plugin 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter. NOTE: the provenance of this information is unknown; the...
krate-sql.txt
evening ppl. ---------------------------------------------------------------- K-Rate Clone Multiple Sql Injection advanced picture rating script Vendor http://turn-k.net/k-rate ---------------------------------------------------------------- Bug founded by d3v1l Date: 12.09.2007...
CVE-2007-4624
Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-4624
Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...
CVE-2007-4624
The CVE-2007-4624 entry describes a cross-site scripting (XSS) vulnerability in AbleDesign Dynamic Picture Frame 1.00, specifically in pframe.php where the img_url parameter can be exploited to inject arbitrary web script or HTML. The vulnerability stems from inadequate input validation of the im...
CVE-2007-4624: Undefined Security Weakness
Cross-site scripting XSS vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter. NOTE: some of these details are obtained from third party information...