1216 matches found
CVE-2011-3790
CVE-2011-3790 affects Piwigo 2.1.5. The vulnerability allows remote attackers to disclose the installation path by requesting a PHP file (e.g., tools/metadata.php) and triggering an error message. Documents consistently describe information disclosure as the impact; no specific exploit details or...
CVE-2011-3790: Exposure of Sensitive Information to an Unauthorized Actor
Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files...
CVE-2011-3790
Piwigo 2.1.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by tools/metadata.php and certain other files...
Piwigo 2.1.2 Cross Site Request Forgery / Cross Site Scripting / SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail :...
piwigo 2.1.2 Multiple vulnerabilities
Exploit for php platform in category web applications ===================================== piwigo 2.1.2 Multiple vulnerabilities ===================================== --=Sql injection=--...
piwigo-2.1.2 - Multiple Vulnerabilities
--=Sql injection=-- http://www.target.com/path/[email protected]&author=sweet&cat=1SQLi&since=1&sortby=date&sortorder=DESC&itemsnumber=5 http://www.target.com/path/picture.php?1sweetSQLi&action=rate=0 http://www.target.com/path/index.php?/search/10SQli --=Stored Xss=-- Admi...
Piwigo 2.0.9 register.php页面多个跨站脚本漏洞
BUGTRAQ ID: 39958 CVECAN ID: CVE-2010-1707 Piwigo是用PHP编写的相册脚本。 Piwigo没有正确地过滤提交给register.php页面的login和mailaddress参数便返回给了用户，远程攻击者可以通过提交恶意参数请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 0 Piwigo 2.0.9 厂商补丁： Piwigo project -------------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2010-1707
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
CVE-2010-1707
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
CVE-2010-1707
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
CVE-2010-1707
CVE-2010-1707 affects Piwigo 2.0.9 and earlier. The register.php endpoint does not properly filter the login and mail_address parameters, enabling multiple cross‑site scripting (XSS) vulnerabilities. Remote attackers could inject arbitrary HTML/JavaScript that would execute in a victim’s browser ...
CVE-2010-1707: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 login and 2 mailaddress parameters...
Piwigo 2.0.6 SQL Injection / Cross Site Scripting
Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...
Piwigo 2.0.6 - Multiple Vulnerabilities
Piwigo 2.0.6 - Multiple Vulnerabilities Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other...
Piwigo v2.0.6 Multiple Vulnerabilities
No description provided by source. Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other...
Piwigo v2.0.6 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ====================================== Piwigo v2.0.6 Multiple Vulnerabilities ====================================== Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For...
Piwigo v2.0.6 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ========================================= Piwigo : mysqlfetcharray expects parameter 1 to be resource, boolean given in C:\xampp\htdocs\piwigo-2.0.6\include\functions.inc.php on line 936 The parentid and imageid and unsanitized however...
Piwigo 2.0.6 - Multiple Vulnerabilities
Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...