EUVD-2007-4245

Malware in sbrugna...

EUVD-2007-4242

Malware in sbrugna...

EZPhotoSales Multiple Configuration Files Remote Information Disclosure

The remote host is running EZPhotoSales, a web-based photo gallery application for photographers written in PHP. The version of EZPhotoSales installed on the remote host fails to restrict access to configuration files used by the application. An unauthenticated, remote attacker can leverage this...

Design/Logic Flaw

EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arbitrary galleries by specifying this username...

Unrestricted file upload

Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/...

CVE-2007-4259

EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via 1 a direct request for a URL under OnlineViewing/galleries/ or 2 navigation of the gallery user interface with JavaScript disabled...

CVE-2007-4261

EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download 1 a file containing cleartext passwords via a direct request for OnlineViewing/data/galleries.txt, or 2 a file containing username hashes and...

CVE-2007-4260

EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arbitrary galleries by specifying this username...

CVE-2007-4262

Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/...

Improper access control

EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download 1 a file containing cleartext passwords via a direct request for OnlineViewing/data/galleries.txt, or 2 a file containing username hashes and...

Design/Logic Flaw

EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via 1 a direct request for a URL under OnlineViewing/galleries/ or 2 navigation of the gallery user interface with JavaScript disabled...

CVE-2007-4259

CVE-2007-4259 affects EZPhotoSales 1.9.3 and earlier. The vulnerability allows remote attackers to download arbitrary image files by either requesting a URL under OnlineViewing/galleries/ directly or by navigating the gallery UI with JavaScript disabled. The root cause is implied to be improper a...

CVE-2007-4260

EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arbitrary galleries by specifying this username...

CVE-2007-4262

Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/...

CVE-2007-4259

EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via 1 a direct request for a URL under OnlineViewing/galleries/ or 2 navigation of the gallery user interface with JavaScript disabled...

CVE-2007-4261

EZPhotoSales 1.9.3 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download 1 a file containing cleartext passwords via a direct request for OnlineViewing/data/galleries.txt, or 2 a file containing username hashes and...

CVE-2007-4262

EZPhotoSales 1.9.3 and earlier has an unrestricted file upload vulnerability that lets remote authenticated administrators upload and execute arbitrary PHP code under the OnlineViewing/galleries/ path. The root cause is unrestricted file upload enabling code execution, allowing an admin with vali...

CVE-2007-4260

CVE-2007-4260 affects EZPhotoSales 1.9.3 and earlier, where a default hard-coded or easily guessed admin username enables remote access to arbitrary galleries by specifying the username. The vulnerability stems from inadequate access controls around the gallery browsing component, permitting an a...

CVE-2007-4261

EZPhotoSales 1.9.3 and earlier stores sensitive data under the web root with weak access control, enabling remote retrieval of (1) a file with cleartext passwords at OnlineViewing/data/galleries.txt and (2) a file with username/password hashes at OnlineViewing/configuration/config.dat/. The secon...

EZPhotoSales 1.9.3 Multiple Vulnerabilities

http://www.airscanner.com/security/07080601ezphotosales.htm Airscanner Mobile Security Advisory 07080601: EZPhotoSales 1.9.3 Multiple Vulnerabilities Product: EZPhotoSales 1.9.3 and below Platform: Windows IIS or Apache with PHP Requirements: Windows IIS or Apache with PHP Credits: Seth Fogie...