CVE-2008-4335

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

CVE-2008-4336

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

Sql injection

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

CVE-2008-4336

The CVE-2008-4336 entry concerns Atomic Photo Album (APA) 1.1.0pre4, where a Cross-site Scripting (XSS) flaw exists in album.php. The vulnerability enables remote attackers to inject arbitrary web script or HTML by manipulating the apa_album_ID parameter. The NVD data indicates a medium base_scor...

CVE-2008-4335

The CVE-2008-4335 entry relates to Atomic Photo Album (APA) 1.1.0pre4. The vulnerability is a SQL injection in album.php, exploitable via the apa_album_ID parameter, which allows a remote attacker to execute arbitrary SQL commands. The issue arises from improper input handling in the affected scr...

CVE-2008-4335

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

CVE-2008-4336

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability

No description provided by source. + Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind javascript:document.cookie = "apacookielogin=foo; path=/;"; javascript:document.cookie = "apacookiepassword=bar; path=/;";...

atomic-cookie.txt

Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind javascript:document.cookie = "apacookielogin=foo; path=/;"; javascript:document.cookie = "apacookiepassword=bar; path=/;";...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc 3 $userid = 1; else $userid = $argv2; $r = strlenfilegetcontents$url."+and+1=1--"...

Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== Atomic Photo Album 1.1.0pre4 Blind SQL Injection Exploit ======================================================== php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live...

Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications =================================================================== Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability =================================================================== + Atomic Photo Album 1.1.0pre4...

Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling

Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling + Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind javascript:document.cookie = "apacookielogin=foo; path=/;"; javascript:document.cookie = "apacookiepassword=bar; path=/;";...

Atomic Photo Album 1.1.0pre4 - Insecure Cookie Handling

Atomic Photo Album 1.1.0pre4 Insecure Cookie Handling Vulnerability + Discovered By Stack + Greetz : All my freind javascript:document.cookie = "apacookielogin=foo; path=/;"; javascript:document.cookie = "apacookiepassword=bar; path=/;"; milw0rm.com 2008-09-26...

Atomic Photo Album 1.1.0pre4 - Blind SQL Injection

php '.$argv0.' http://www.site.com/apa/album.php?apaalbumID=2 2 Live Demo : http://www.brzi.info/foto/album.php?apaalbumID=2 1 '; if $argc 1 $url = $argv1; if $argc $t-1 $count = $i; $i = 30; for $j = 1; $j $count; $j++ for $i = 46; $i = 122; $i=$i+2 if $i == 60 $i = 98;...

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting SQL Injection

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting SQL Injection ----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net...

Atomic Photo Album 1.1.0pre4 - Cross-Site Scripting / SQL Injection

----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date: 25.09.2008 [email protected]...

atomic-sqlxss.txt

----------------------------------------------------------------------- Atomic Photo Album 1.1.0pre4 album.php - Multiple Remote Vulnerabilities http://atomicpa.sourceforge.net ---------------------------------------------------------- Bug founded by d3v1l Date: 25.09.2008 [email protected]...

Atomic Photo Album 1.1.0pre4 (XSS/SQL) Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Atomic Photo Album 1.1.0pre4 XSS/SQL Remote Vulnerabilities =============================================================...