ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities Date : 12-january-2008 Risk : Medium Vendor URL : http://www.matteobinda.com/apg.php Google Dork : download this free gallery at matteobinda.com : allinurl: imgbig.asp?id= Found By : Ruben Ventura Pi...

MG2 0.5.1 Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15235/info MG2 is affected by an authentication bypass vulnerability. This issue can allow remote attackers to gain access to password protected image galleries. All versions of MG2 are considered to be vulnerable at the...

WordPress global flash galleries插件远程文件上传漏洞

No description provided by source. Exploit : = = = = = = = = = Perl ! /usr/bin/perl use LWP; use HTTP::Request::Common; my $url, $file = @ARGV; my $ua = LWP::UserAgent-new; my $req = POST $url, ContentType = 'form-data', Content = name = $name, galleryselect = 1, Gallery ID popup.php Filedata =...

WordPress Global Flash Galleries File Upload

Exploit Title: WordPress global-flash-galleries Plugin Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 01/18/2014 Vendor Homepage: http://wordpress.org Software Link : http://downloads.wordpress.org/plugin/global-flash-galleries.zip Google dork:...

WordPress Plugin PhotoSmash Galleries - 'bwbps-uploader.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/64173/info The PhotoSmash Galleries plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly validate file extensions before uploading them. An attacker may leverage this...

WordPress Plugin PhotoSmash Galleries - bwbps-uploader.php Arbitrary File Upload

WordPress Plugin PhotoSmash Galleries - bwbps-uploader.php Arbitrary File Upload source: https://www.securityfocus.com/bid/64173/info The PhotoSmash Galleries plugin for WordPress is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because it fails to properly...

WordPress PhotoSmash Galleries Plugin - Arbitrary File Upload

PhotoSmash Galleries plugin is prone to an arbitrary file upload vulnerability via "bwbps-uploader.php". It allows an attacker to upload arbitrary files to the affected computer. Solution Upgrade the plugin...

CVE-2012-2305

The CVE-2012-2305 issue affects the Drupal Node Gallery contributed module, specifically versions 6.x-3.1 and earlier. The root cause is a Cross-Site Request Forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of certain users when creating node galleries. The p...

PhotoSmash Galleries WordPress Plugin 'action' Parameter XSS Vulnerability

WordPress PhotoSmash Galleries Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

WordPress Plugin PhotoSmash Galleries 1.0.x - action Cross-Site Scripting

WordPress Plugin PhotoSmash Galleries 1.0.x - action Cross-Site Scripting source: https://www.securityfocus.com/bid/46782/info The PhotoSmash Galleries WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

WordPress PhotoSmash Galleries Plugin 1.0.x - Cross-Site Scripting

PhotoSmash Galleries plugin's "action" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

WordPress Plugin PhotoSmash Galleries 1.0.x - 'action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46782/info The PhotoSmash Galleries WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Video Charge Studio 2.9.5.643 Buffer Overflow

!/usr/bin/python Exploit Title: Video Charge Studio = 2.9.5.643 .vsc Buffer Overflow SEH Date: 12/05/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link: http://www.videocharge.com/download/VideoChargeStudioInstall.exe Version: =...

Video Charge Studio 2.9.5.643 - .vsc Local Buffer Overflow (SEH)

Video Charge Studio 2.9.5.643 - .vsc Local Buffer Overflow SEH !/usr/bin/python Exploit Title: Video Charge Studio = 2.9.5.643 .vsc Buffer Overflow SEH Date: 12/05/2010 Author: xsploitedsec URL: http://www.x-sploited.com/ Contact: xsploitedsecurity at x-sploited.com Software Link:...

yappa <= 3.1.2 (yappa.php) RFI / Command Execution Vulnerability

Exploit for php platform in category web applications ======================================================================= yappa Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm...

Yappa 3.1.2 Remote File Inclusion / Code Execution

---------------------------------------------------------------------------- Remote File Inclusion Vulnerability and Remote Command Execution Vulnerability ---------------------------------------------------------------------------- yappa ==3.1.2 yappa.php...

ClickGallery Server - SQL Injection

============================================================== ClickGallery Server--SQl iNjection Vulnerabilty ============================================================== Name : ClickGallery Server--SQl iNjection Vulnerabilty Date : july 9,2010 Critical Level :VERY HIGH vendor URL :...

ClickGallery Server - SQL Injection

ClickGallery Server - SQL Injection ============================================================== ClickGallery Server--SQl iNjection Vulnerabilty ============================================================== Name : ClickGallery Server--SQl iNjection Vulnerabilty Date : july 9,2010 Critical Leve...

ClickGallery Server SQL injection Vulnerabilty

Exploit for asp platform in category web applications ============================================== ClickGallery Server SQL injection Vulnerabilty ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /...

Linker IMG 1.0 - Remote File Inclusion

Linker IMG 1.0 - Remote File Inclusion 1 1 0 I'm Sn!pEr.S!Te Hacker member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 ------------------------------------------------------------ Remote File Inclusion Vulnerability...