330 matches found
CVE-2009-4563
CVE-2009-4563 describes a CSRF vulnerability in Zenphoto 1.2.5, specifically in zp-core/admin-options.php. The issue allows remote attackers to hijack an administrator’s session and trigger password changes via the 0-adminpass and 0-adminpass_2 parameters in a saveoptions action. The connected do...
CVE-2008-6925
Cross-site scripting XSS vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the "request logging" feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
Cross site scripting
Cross-site scripting XSS vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the "request logging" feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
CVE-2008-6925
Zenphoto 1.1.7 contains a Cross‑Site Scripting (XSS) flaw in function.php, exploitable via the \
CVE-2008-6925
Cross-site scripting XSS vulnerability in function.php in Zenphoto 1.1.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the "request logging" feature. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
ZenPhoto Gallery 1.2.5 Password Reset
?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com +----------------------------------------------------------------+ Affects: ZenPhoto Gallery 1.2.5...
ZenPhoto Gallery 1.2.5 Admin Password Reset (CRSF)
Exploit for unknown platform in category web applications ================================================== ZenPhoto Gallery 1.2.5 Admin Password Reset CRSF ================================================== ?php Zen Photo Adminstrator Password Steal/Reset Exploit...
ZenPhoto Gallery 1.2.5 - Admin Password Reset (Cross-Site Request Forgery)
ZenPhoto Gallery 1.2.5 - Admin Password Reset Cross-Site Request Forgery ?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com...
ZenPhoto Gallery 1.2.5 Admin Password Reset (CRSF)
No description provided by source. ?php Zen Photo Adminstrator Password Steal/Reset Exploit +================================================================+ Discovered and coded by petros at dusecurity.com +----------------------------------------------------------------+ Affects: ZenPhoto...
ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit
Exploit for unknown platform in category web applications ===================================================== ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit ===================================================== / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements:...
ZenPhoto 1.2.5 Blind SQL Injection
/ ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided will allow you to extract the username and...
ZenPhoto 1.2.5 Completely Blind SQL Injection Exploit
No description provided by source. / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided will allow y...
ZenPhoto 1.2.5 - Completely Blind SQL Injection
/ ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided will allow you to extract the username and...
ZenPhoto 1.2.5 - Completely Blind SQL Injection
ZenPhoto 1.2.5 - Completely Blind SQL Injection / ZenPhoto 1.2.5 Completly Blind SQL Injection Exploit Requirements: magicquotes = ANY zenpage disables it anyway, ZenPage needs to be activated and have at least one news category What does this exploit let you do: The precoded functions I provided...
FreeBSD Ports: zenphoto
The remote host is missing an update to the system as announced in the referenced advisory. VID 1a818749-d646-11dc-8959-000bcdc1757a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
FreeBSD Ports: zenphoto
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD : zenphoto -- XSS vulnerability (1a818749-d646-11dc-8959-000bcdc1757a)
zenphoto project reports : A new zenphoto version is now available. This release contains security fixes for HTML, XSS, and SQL injection vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...
Sql injection
SQL injection vulnerability in rss.php in Zenphoto 1.1 through 1.1.3 allows remote attackers to execute arbitrary SQL commands via the albumnr parameter...
