apnaspace.txt

Apnaspace.com A myspace type site for arab & indian teens Homepage: http://www.http://www.apnaspace.com Effected files: Comment input box: Posting a blog entry: - Entry title - Entry body Viewing a profile Posting a bulletin. Commenting on a picture Sending mail to someone...

iFdate v1.2

sorry if youget this twice, the reply page timed out iFdate v1.2 Homepage: http://www.ifusionservices.co.uk/products/productifdate.php Description: Packed full of great features, it supports themes and looks sleek, your users will be able to create & customize their very own profile page, upload...

JMKpicture.txt

dork: "JMK's Picture Gallery" and last path to add : admingallery.php3?action=add&upload=1 example:hhtp://www.site.com/path/.../admingallery.php3?action=add&upload=1 credits:AlpEren,tugr@...

Authentication flaw

JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admingallery.php3, possibly related to the add action...

CVE-2006-2118

JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admingallery.php3, possibly related to the add action...

CVE-2006-2118

Vulnerability summary (CVE-2006-2118): JMK’s Picture Gallery allows remote attackers to bypass authentication by issuing a direct request to admin_gallery.php3, possibly related to the add action. The available documents do not provide further details on affected versions, root cause specifics, o...

CVE-2006-2118

JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admingallery.php3, possibly related to the add action...

JMK's Picture Gallery admin login

dork: "JMK's Picture Gallery" and last path to add : admingallery.php3?action=add&upload=1 example:hhtp://www.site.com/path/.../admingallery.php3?action=add&upload=1 credits:AlpEren,tugr@...

CVE-2006-2118: Undefined Security Weakness

JMK's Picture Gallery allows remote attackers to bypass authentication via a direct request to admingallery.php3, possibly related to the add action...

zgv, xzgv: Heap overflow

Background xzgv and zgv are picture viewing utilities with a thumbnail based file selector. Description Andrea Barisani of Gentoo Linux discovered xzgv and zgv allocate insufficient memory when rendering images with more than 3 output components, such as images using the YCCK or CMYK colour space...

DSA-1038-1 xzgv - programming error

Bulletin has no description...

Cross site scripting

Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...

XSS flaw in MG2 Image Gallery (v.0.5.1)

Users can inject XSS into the form field "Name", when adding a comment on a picture. This will lead to the execution of XSS code. Simple scripting like scriptalert'hello'/script , and more advanced document.location, and document.cookie works. This has been tested on version 0.5.1. Other versions...

Buffer overflow

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-0316

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2006-0316: Undefined Security Weakness

Buffer overflow in YGPPicFinder.DLL in AOL You've Got Pictures YGP Picture Finder Tool ActiveX Control, as used in AOL 8.0, 8.0 Plus, and 9.0 Classic, allows remote attackers to execute arbitrary code via unspecified vectors...

[SA18521] AOL You've Got Pictures ActiveX Control Buffer Overflow

TITLE: AOL You've Got Pictures ActiveX Control Buffer Overflow SECUNIA ADVISORY ID: SA18521 VERIFY ADVISORY: http://secunia.com/advisories/18521/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: From remote SOFTWARE: AOL 8.x http://secunia.com/product/6839/ AOL 9.x Classic...

CVE-2005-3713: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block...

ie_xp_pfv_metafile.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

ISS Protection Alert: Windows Picture and Fax Viewer WMF Overflow

-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Protection Alert December 28, 2005 Microsoft Picture and Fax Viewer WMF Buffer Overflow Summary: The X-Force is tracking a new, unpatched critical vulnerability in Microsoft.s Picture and Fax Viewer application which is the default view...