Multiple vulnerabilities in ZENphoto

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ZENphoto, which can be exploited to perform arbitrary PHP code execution, sql injection and cross site scripting attacks. 1 Arbitrary PHP Code Execution in ZENphoto: CVE-2012-0993 Input passed via...

iScripts EasySnaps 2.0 - Multiple SQL Injections

iScripts EasySnaps 2.0 - Multiple SQL Injections iScripts EasySnaps 2.0 Multiple SQL Injection Vulnerabilities Name iScripts EasySnaps Vendor http://www.iscripts.com Versions Affected 2.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmai...

miniBB 2.2 (CSS/SQL/FPD) Multiple Remote Vulnerabilities

No description provided by source. Author: GiReX Homepage: girex.altervista.org Date: 21/04/2008 CMS: miniBB 2.2 and maybe prior Site: minibb.net Bug 1: Full Path Disclosure Bug 2: Cross Site Scripting Bug 3: Remote SQL Injection Need: registerglobals = On ---------------------------------------...

Microsoft Vista (NtRaiseHardError) Privilege Escalation Exploit

Exploit for unknown platform in category local exploits =============================================================== Microsoft Vista NtRaiseHardError Privilege Escalation Exploit =============================================================== //raise.c //26-12-2006 erasmus/ORC //exploit...

[SA19435] VNews Multiple Vulnerabilities

TITLE: VNews Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19435 VERIFY ADVISORY: http://secunia.com/advisories/19435/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, System access WHERE: From remote SOFTWARE: VNews 1.x http://secunia.com/product/9043/...

AdMan v1.0.x SQL vuln

AdMan v1.0.x SQL vuln Vuln. discovered by : r0t Date: 23 march 2006 vendor:www.formfields.com/adManArea/ affected versions: v1.0.20051221 and prior orginal advisory: http://pridels.blogspot.com/2006/03/adman-v10x-sql-vuln.html SQL vuln. AdMan contains a flaw that allows a remote sql injection...