Exponent Slideshow XSS Vulnerability

Title: Exponent Slideshow XSS Vulnerability Vendor: Exponent Product: Exponent CMS Tested Version: 0.97.0 Threat Class: XSS Severity: High Remote: yes Local: no Discovered By: Andrei Rimsa Alvares ===== Description ===== The file "modules/slideshowmodule/slideshow.js.php" is prone to XSS...

[Bkis-03-2010] Vulnerability in Flash Slideshow Maker Vulnerability

Bkis-03-2010 Vulnerability in Flash Slideshow Maker Vulnerability 1. General Information Flash Slideshow Maker is a Flash album creator to make animated photo slide show with SWF file as the output format. Bkis has just detected a vulnerability in the software related to the processing of Flash...

Flash Slideshow Maker buffer overflow

Buffer overflow on .fss files parsing...

Uphotogallery Server SQL Injection Vulnerabilty

Exploit for asp platform in category web applications =============================================== Uphotogallery Server SQL Injection Vulnerabilty =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Joomla 1.5 Jreservation Component SQLi And XSS Vulnerability

Exploit for php platform in category web applications ============================================================ Joomla 1.5 Jreservation Component SQLi And XSS Vulnerability ============================================================...

JV2 Folder Gallery 3.1.1 (popup_slideshow.php) Multiple Vulnerability

Exploit for php platform in category web applications ===================================================================== JV2 Folder Gallery 3.1.1 popupslideshow.php Multiple Vulnerability =====================================================================...

CVE-2009-4338

SQL injection vulnerability in the Flash SlideShow slideshow extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

Sql injection

SQL injection vulnerability in the Flash SlideShow slideshow extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-4338

CVE-2009-4338 affects the Flash SlideShow (slideshow) extension for TYPO3, version 0.2.2. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL commands via unknown vectors. The issue is documented across multiple sources (NVD, CVE lists) with a consistent des...

CVE-2009-4338

SQL injection vulnerability in the Flash SlideShow slideshow extension 0.2.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unknown vectors...

CVE-2009-3214

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...

Stack overflow

Multiple stack-based buffer overflows in Photodex ProShow Gold 4.0.2549 allow remote attackers to execute arbitrary code via a crafted Slideshow project .psh file, related to the 1 celln.imagesm.image and 2 celln.sound.file fields...

Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ultimate Fade-in slideshow 1.51 Shell Upload Vulnerability ========================================================== ================== NaMe: Ultimate Fade-in slideshow 1.51 = She...

Ultimate Fade-in Slideshow 1.51 Shell Upload

================== NaMe: Ultimate Fade-in slideshow 1.51 = Shell Upload Vulnerability Author : NeX HaCkeR Contact: [email protected] ================== Script site : http://www.dynamicdrive.com ================== ExplOiT: 1: register in site http://www.xxx.com/path/userregister.php 2: go to your Ad...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHPSlideshow: crossite scripting. Athree CMS: information leak, SQL injection, DoS...

InselPhoto 1.1 Cross Site Scripting

Software: InselPhoto v1.1 Persistent XSS Vulnerability Discovered by: Paul Hand aka rAWjAW Blog: http://rawjaw-security.blogspot.com E-mail: phand3754gmailcom Shouts: rBg && eternalsecurity For this Persistent XSS to work you have to: 1. Create a user account 2. Create an album 3. Upload any...

InselPhoto 1.1 Persistent XSS Vulnerability

Exploit for unknown platform in category web applications =========================================== InselPhoto 1.1 Persistent XSS Vulnerability =========================================== Software: InselPhoto v1.1 Persistent XSS Vulnerability Discovered by: Paul Hand aka rAWjAW For this...

CVE-2008-4549

The ImageShack Toolbar ActiveX control ImageShackToolbar.dll in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method...

Unfixed XSS vulnerability at www.smudo.org

Security researcher Uber0n, has submitted on 15/09/2008 a cross-site-scripting XSS vulnerability affecting www.smudo.org, which at the time of submission ranked 1809539 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2008. It is currently...

[SECURITY] Fedora 7 Update: feh-1.3.4-8.fc7

feh is a versatile and fast image viewer using imlib2, the premier image file handling library. feh has many features, from simple single file viewing, to multiple file modes using a slideshow or multiple windows. feh supports the creation of montages as index prints with many user-configurable...