Plogger CMS 1.0 RC1 Cross Site Scripting

Exploit Title: Plogger cms sortdir Cross Site Scripting Vulnerability Version : 1.0 RC1 Date: 08/29/2012 Author: Crim3R Site : Http://Ajaxtm.com/ Vendor Home or download link: http://www.plogger.org/download/ Tested on: all ================================== Plogger is the next generation in...

Plogger 1.0 RC1 Cross Site Scripting

HTTPCS Advisory : HTTPCS83 Product : Plogger Version : 1.0 RC1 Date : 2012-08-28 Criticality level : Less Critical Description : A vulnerability has been discovered in Plogger, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the 'sortby'...

Plogger Photo Gallery - SQL Injection

Plogger Photo Gallery - SQL Injection source: https://www.securityfocus.com/bid/53644/info Plogger Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to...

Plogger Photo Gallery - SQL Injection

source: https://www.securityfocus.com/bid/53644/info Plogger Photo Gallery is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit will allow an attacker to compromise the application, to access ...

Plogger Photo Gallery SQL Injection

Plogger Photo Gallery All Versions Sql Vulnerability Exploit Date: 2/1/2012 - 9:00 Author: Cyber White Hats Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: CyberWH.org/Forum Mail: [email protected] Software Website: http://plogger.org/ Security Risk: High Platform: P...

HTB22925: Path disclosure in Plogger

Vulnerability ID: HTB22925 Reference: http://www.htbridge.ch/advisory/pathdisclosureinplogger.html Product: Plogger Vendor: Plogger Team http://www.plogger.org/ Vulnerable Version: 1.0 RC1 Vendor Notification: 29 March 2011 Vulnerability Type: Path disclosure Risk level: Low Credit: High-Tech...

HTB22926: XSS vulnerability in Plogger

Vulnerability ID: HTB22926 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinplogger.html Product: Plogger Vendor: Plogger Team http://www.plogger.org/ Vulnerable Version: 1.0 RC1 Vendor Notification: 29 March 2011 Vulnerability Type: XSS Risk level: Medium Credit: High-Tech Bridge SA ...

Plogger 1.0 RC1 - 'gallery_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47329/info Plogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Plogger 1.0 RC1 Cross Site Scripting / Path Disclosure

================================ Vulnerability ID: HTB22926 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinplogger.html Product: Plogger Vendor: Plogger Team http://www.plogger.org/ Vulnerable Version: 1.0 RC1 Vendor Notification: 29 March 2011 Vulnerability Type: XSS Risk level:...

Plogger 1.0 RC1 - gallery_name Cross-Site Scripting

Plogger 1.0 RC1 - galleryname Cross-Site Scripting source: https://www.securityfocus.com/bid/47329/info Plogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

Cross-site Request Forgery (CSRF) in Plogger

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Plogger which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF vulnerability in Plogger The vulnerability exists due to insufficient validation of the request...

Plogger Gallery 1.0 CSRF Change Admin Password

Exploit for php platform in category web applications ============================================== Plogger Gallery 1.0 CSRF Change Admin Password ============================================== ------------------------------------------------------------------------- Software : PloggerGallery...

Plogger Gallery 1.0 Cross Site Request Forgery

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +---+CSRF Chang...

Plogger Gallery 1.0 - Cross-Site Request Forgery (Change Admin Password)

Plogger Gallery 1.0 - Cross-Site Request Forgery Change Admin Password ------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/...

Plogger Gallery 1.0 - Cross-Site Request Forgery (Change Admin Password)

------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/ ------------------------------------------------------------------------- +---+CSRF Chang...

Plogger Remote File Disclosure

Plogger Remote File Disclosure Vulnerability http://www.plogger.org/ dork : Powered by Plogger! author: Mr.tro0oqy yemeni hacker email : [email protected] exp : Line 117: if $fpsource = @fopen$GET'src','rb'...

Plogger - Remote File Disclosure

Plogger Remote File Disclosure Vulnerability http://www.plogger.org/ dork : Powered by Plogger! author: Mr.tro0oqy yemeni hacker email : [email protected] exp : Line 117: if $fpsource = @fopen$GET'src','rb'...

Plogger Remote File Disclosure Vulnerability

Exploit for php platform in category web applications ============================================ Plogger Remote File Disclosure Vulnerability ============================================ Plogger Remote File Disclosure Vulnerability http://www.plogger.org/ dork : Powered by Plogger! author:...

Plogger - Remote File Disclosure

Plogger - Remote File Disclosure Plogger Remote File Disclosure Vulnerability http://www.plogger.org/ dork : Powered by Plogger! author: Mr.tro0oqy yemeni hacker email : [email protected] exp : Line 117: if $fpsource = @fopen$GET'src','rb'...

CVE-2008-3563

Multiple SQL injection vulnerabilities in Plogger 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the checked array parameter to plog-download.php in an album action and 2 unspecified parameters to plog-remote.php, and 3 allow remote authenticated administrators to...