EUVD-2007-5288

Malware in sbrugna...

CVE-2008-4516

CVE-2008-4516 concerns SQL injection in Galerie 3.2 via galerie.php, where the pic parameter can be manipulated to execute arbitrary SQL commands remotely. Affected product: Galerie 3.2. Impact from NVD: partial confidentiality, integrity, and availability with a CVSS v2 base score of 7.5 (HIGH)....

CVE-2007-5308

The CVE-2007-5308 entry concerns SQL injection in galerie.php of PHP Homepage M (phpHPm) 1.0 when magic_quotes_gpc is disabled. Remote attackers can modify the id parameter in a show action to execute arbitrary SQL commands (impacting confidentiality, integrity, and availability). The NVD entry l...

PHP Homepage M 1.0 galerie.php Remote SQL Injection Exploit

No description provided by source. ?php if $argv1 == '' echo "--PHP Homepage M V.1.0 galerie.php Exploit----\n"; echo "only with magicquotesgpc OFF\n"; echo "by PHCN Mahjong\n"; echo "Usage : phpHPmv1.php http://127.0.0.1 / 1\n"; echo '----------------------------------------------'; else $host =...

phphome-sql.txt

',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ?...

PHP Homepage M 1.0 - 'galerie.php' SQL Injection

',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ? milw0rm.com 2007-10-08...

PHP Homepage M 1.0 - galerie.php SQL Injection

PHP Homepage M 1.0 - galerie.php SQL Injection ',30; $user = explode'',$user; $user = strrev$user1; $user = substr$user,4,100; $user = strrev$user; echo "--EXPLOIT FINISHED--\n"; echo "userid : $userid\n"; echo "username: $user\n"; echo "password: $pw\n"; echo '--------------------'; ? milw0rm.co...

CVE-2007-4328: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the configrootordner parameter to 1 index.php, 2 galerie.php, or 3 anzagien.php. NOTE: A later report states that 1.1 is also affected, but that the...

CVE-2007-3523

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

Directory traversal

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3523

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

CVE-2007-3523: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in the 1 Ent or 2 Lang parameter...

XCMS 1.1 - Galerie.php Local File Inclusion

XCMS 1.1 - Galerie.php Local File Inclusion Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: XCMS : CMS Version:: 1.1 Type:: Remote Directory Listing & Local File Include Source:: http://groupeclan.free.fr/XCMS.zip Bug:: - Files: /Module/Galerie.php.php -...

XCMS 1.1 (Galerie.php) Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== XCMS 1.1 Galerie.php Local File Inclusion Vulnerabilities =========================================================== Author:: BlackNDoor Homepage:: www.learntohell.net Script::...

XCMS 1.1 (Galerie.php) Local File Inclusion Vulnerabilities

No description provided by source. Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: XCMS : CMS Version:: 1.1 Type:: Remote Directory Listing & Local File Include Source:: http://groupeclan.free.fr/XCMS.zip Bug:: - Files: /Module/Galerie.php.php - vulncode:...

XCMS 1.1 - 'Galerie.php' Local File Inclusion

Author:: BlackNDoor | [email protected] Homepage:: www.learntohell.net Script:: XCMS : CMS Version:: 1.1 Type:: Remote Directory Listing & Local File Include Source:: http://groupeclan.free.fr/XCMS.zip Bug:: - Files: /Module/Galerie.php.php - vulncode: if!isset$GET'Lang' $Lang="fr"; else...

Cross site scripting

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2294

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2294: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Dynamic Galerie 1.0 allows remote attackers to inject arbitrary web script or HTML via the pfad parameter in 1 index.php and 2 galerie.php. NOTE: this issue might be resultant from directory traversal...

CVE-2006-2295: Undefined Security Weakness

Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad parameter to 1 index.php and 2 galerie.php...