HTB22962: Multiple XSS in YaPiG

Vulnerability ID: HTB22962 Reference: http://www.htbridge.ch/advisory/multiplexssinyapig.html Product: YaPiG Yet Another PHP Image Gallery Vendor: http://yapig.sourceforge.net/ http://yapig.sourceforge.net/ Vulnerable Version: 0.95 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cross...

YaPiG 0.95 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/47698/info YaPIG is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

YaPiG 0.95 - Multiple Cross-Site Scripting Vulnerabilities

YaPiG 0.95 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/47698/info YaPIG is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...

Cross-site Scripting (XSS) Vulnerabilities in YaPiG

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in YaPiG which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in YaPiG 1.1 The vulnerability exists due to input sanitation errors in multiple scripts inside t...

YaPiG 0.94.0u - Remote File Inclusion

YaPiG 0.94.0u - Remote File Inclusion |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x! -----------|01| -Script...

YaPig v0.94.0u Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ================================================== YaPig v0.94.0u Remote File Inclusion Vulnerability ================================================== |=-----------------------------------------------------=| |=-------------= JIKO...

YaPiG 0.94.0u - Remote File Inclusion

|=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x! -----------|01| -Script name :YaPig V0.94.0u link...

YaPig 0.94 Remote File Inclusion

|=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com| =-----------=| |=-----------------------------------------------------=| -----------|00| NAme :JIKO JAWAD Home :No-exploit.Com Mail : !x! -----------|01| -Script name :YaPig V0.94.0u link...

YaPig V0.94 remote File Include Vulnerability

Exploit for php platform in category web applications ============================================= YaPig V0.94 remote File Include Vulnerability ============================================= |=-----------------------------------------------------=| |=-------------= JIKO |No-exploit.Com|...

Remote file inclusion

PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIGPATH parameter. NOTE: this issue has been disputed by CVE, since YAPIGPATH is defined before use...

CVE-2007-4951

PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIGPATH parameter. NOTE: this issue has been disputed by CVE, since YAPIGPATH is defined before use...

CVE-2007-4951

PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the YAPIGPATH parameter. NOTE: this issue has been disputed by CVE, since YAPIGPATH is defined before use...

CVE-2007-4951

CVE-2007-4951 is a PHP remote file inclusion in YaPiG 0.95b (sample.php) allowing arbitrary PHP code execution via a URL in the YAPIG_PATH parameter. The issue is reported as disputed by CVE since YAPIG_PATH is defined before use. No exploitation details are provided in the documents. A remediati...

PT-2007-6065 · Yapig · Yapig

Name of the Vulnerable Software and Affected Versions: YaPiG version 0.95b Description: A remote file inclusion issue in sample.php allows remote attackers to execute arbitrary PHP code via a URL in the YAPIG PATH parameter. Recommendations: For YaPiG version 0.95b, consider restricting the use o...

YaPIG 0.95b Remote Code Execution Exploit

No description provided by source. ?php / This module adds a comment file in $giddir . $gid . "" .$phid file Each File will have this format if $SEPARATOR=":"; title:author:date:email:web:message\n if a message contains "\n" character, it will be replaced with "br /" The variables receives by the...

YaPiG 0.95b - Remote Code Execution

?php / \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : YaPIG 0.95b Vendor : http://yapig.sourceforge.net Author : Dj7xpl We Are : Y4Ho0 -Mr.Mithridates -Sir SiSiLi -System Failure -Satanic Soulfull -And Me Email : [email protected] Home :...

YaPIG 0.95b Remote Code Execution Exploit

Exploit for unknown platform in category web applications ========================================= YaPIG 0.95b Remote Code Execution Exploit ========================================= ?php / \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : YaPIG 0.95b...

YaPiG 0.95b - Remote Code Execution

YaPiG 0.95b - Remote Code Execution ?php / \|/// \ - - // @ @ ----oOOo---oOOo-------------------------------------------------- Portal : YaPIG 0.95b Vendor : http://yapig.sourceforge.net Author : Dj7xpl We Are : Y4Ho0 -Mr.Mithridates -Sir SiSiLi -System Failure -Satanic Soulfull -And Me Email :...

YaPiG 0.9x - Thanks_comment.php Cross-Site Scripting

YaPiG 0.9x - Thankscomment.php Cross-Site Scripting source: https://www.securityfocus.com/bid/19709/info Yapig is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. This may let an attacker steal cookie-based authentication credentials and...

YaPiG 0.9x - 'Thanks_comment.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/19709/info Yapig is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. This may let an attacker steal cookie-based authentication credentials and launch other attacks. This issue affects version 0.95b;...