616 matches found
Coppermine Gallery < 1.4.4 Script Injection
Binary data 3436.prm...
Coppermine Photo Gallery <=1.4.3 remote code execution
Coppermine Photo Gallery = 1.4.3 arbitrary local/remote inclusion: --------- - 18/02/2006 5.09.55 ----------------------------------------------------------- -------------------------------------------------------------------------------- software: site: http://coppermine-gallery.net/index.php...
coppermine -- File Inclusion Vulnerabilities
Secunia reports: Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious people and by malicious users to compromise a vulnerable system. 1 Input passed to the "lang" parameter in include/init.inc.php isn't properly verified, before it is used to include files. This can...
Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
Exploit for unknown platform in category web applications =================================================================== Coppermine Photo Gallery this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage:...
Coppermine Photo Gallery <= 1.4.3 Remote Commands Execution Exploit
No description provided by source. ?php ---cpg143inclxpl.php 15.38 04/12/2005 Coppermine Photo Gallery = 1.4.3 remote commands execution coded by rgod site: http://retrogod.altervista.org - this works regardless of any php.ini settings, you need a normal user account with upload rights in persona...
Coppermine Photo Gallery 1.4.3 - Remote Command Execution
Coppermine Photo Gallery 1.4.3 - Remote Command Execution this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect...
Coppermine Photo Gallery 1.4.3 - Remote Command Execution
this works regardless of any php.ini settings, you need a normal user account with upload rights in personal albums and at least one album usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "The direct and the indirect lead on to each other in turn. It is like moving in a...
CVE-2005-3979
CVE-2005-3979 affects Coppermine Photo Gallery (CPG) versions 1.4.2 and 1.4 beta. The file relocate_server.php is not removed after installation and does not require authentication, enabling remote attackers to obtain sensitive information (e.g., database configuration) via a direct request. The ...
CVE-2005-3979
relocateserver.php in Coppermine Photo Gallery CPG 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request...
CVE-2005-3979: Improper Authentication
relocateserver.php in Coppermine Photo Gallery CPG 1.4.2 and 1.4 beta is not removed after installation and does not use authentication, which allows remote attackers to obtain sensitive information, such as database configuration, via a direct request...
[SA17855] Coppermine Photo Gallery "relocate_server.php" Exposure of Configuration
TITLE: Coppermine Photo Gallery "relocateserver.php" Exposure of Configuration SECUNIA ADVISORY ID: SA17855 VERIFY ADVISORY: http://secunia.com/advisories/17855/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Coppermine Photo Gallery 1.x...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
No description provided by source. tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good...
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection
Coppermine Photo Gallery 1.3.2 - File Retrieval SQL Injection tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use...
Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================================== Coppermine Photo Gallery By DiGiTALMiDWAY import urllib2, sys from urllib import urlencode import zipfile iflensys.argv2: print 'usage : %s http://host/Path/...
Coppermine Photo Gallery 1.3.2 - File Retrieval / SQL Injection
tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good cookie : By DiGiTALMiDWAY import...
Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities
Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities Summary : A large majority of PHP Images Gallery Technologies now handle the Exchangeable Image File EXIF header of jpeg files. The Exchangeable Image File EXIF format is an international specification that lets imaging companies...
Coppermine Photo Gallery EXIF Data XSS
According to its banner, the version of Coppermine Gallery installed on the remote host is prone to cross-site scripting attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML...
CVE-2005-2676
Cross-site scripting XSS vulnerability in displayimage.php in Coppermine Photo Gallery before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via EXIF data...
CVE-2005-2676
The CVE-2005-2676 entry concerns Coppermine Photo Gallery prior to version 1.3.4, where displayimage.php is vulnerable to cross-site scripting via crafted EXIF data. The vulnerability allows an attacker-supplied EXIF payload to be reflected into the HTML/JS context, enabling arbitrary script exec...
