344 matches found
CVE-2006-1165
CVE-2006-1165 is an XSS vulnerability in the DokuWiki mediamanager module. Affects DokuWiki versions prior to 2006-03-05; impact is remote script/HTML injection via unknown attack vectors tied to EXIF data handling. The provided documents do not specify a fix or remediation steps.
CVE-2006-1165
Cross-site scripting XSS vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors relating to "handling EXIF data."...
Exiv2 - Corrupted EXIF Data Denial of Service
source: https://www.securityfocus.com/bid/16400/info Exiv2 is susceptible to a denial-of-service vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input data before attempting to read it, resulting in an out-of-bounds memory access crash. This...
CVE-2005-2734
Cross-site scripting XSS vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...
CVE-2005-2737
Cross-site scripting XSS vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...
CVE-2005-2734
Gallery: XSS via EXIF data (CVE-2005-2734) affects Gallery 1.5.1-RC2 and earlier. An attacker can inject script/HTML through EXIF fields (e.g., Camera Model Tag). Debian/DSA-1148 and OpenVAS references indicate remote, pre-patch exposure; remediation is upgrading to fixed Gallery packages (e.g., ...
CVE-2005-2737
Cross-site scripting XSS vulnerability in PhotoPost PHP Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...
CVE-2005-2735
CVE-2005-2735 describes a cross-site scripting (XSS) vulnerability in phpGraphy 0.9.9a and earlier . The flaw allows remote attackers to inject arbitrary web script or HTML via EXIF data (e.g., Camera Model Tag) . Documented impact indicates that the vulnerability can be triggered through crafted...
CVE-2005-2736
CVE-2005-2736 describes a cross-site scripting (XSS) vulnerability in the web gallery application YaPiG (versions ≤ 0.95). The flaw arises from processing EXIF data (e.g., the Camera Model Tag) without sufficient sanitization, allowing an attacker to inject arbitrary web script or HTML that can b...
CVE-2005-2736
Cross-site scripting XSS vulnerability in YaPig 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...
CVE-2005-2734
Cross-site scripting XSS vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag...
PhotoPost PHP Pro EXIF Data XSS
According to its banner, the version of PhotoPost PHP Pro installed on the remote web server is prone to script insertion attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML...
Gallery EXIF Data XSS
According to its banner, the version of Gallery hosted on the remote web server is prone to script insertion attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML and script...
phpGraphy EXIF Data XSS
The remote host is running phpGraphy, a web-based photo album. According to its banner, the version of phpGraphy installed on the remote host is prone to script insertion attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an...
Coppermine Photo Gallery EXIF Data XSS
According to its banner, the version of Coppermine Gallery installed on the remote host is prone to cross-site scripting attacks because it does not sanitize malicious EXIF data stored in image files. Using a specially crafted image file, an attacker can exploit this flaw to cause arbitrary HTML...
PhotoPost < 5.11 PHP Pro EXIF Data XSS
Binary data 3187.prm...
[SA16594] Gallery EXIF Data Script Insertion Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
[SA16595] phpGraphy EXIF Data Script Insertion Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...