SA-CONTRIB-2009-108 - Gallery Assist - Cross Site Scripting

The Gallery Assist module provides a simple way to create image galleries on a site. The module does not sanitize node titles, leading to a Cross Site Scripting XSS vulnerability. Versions affected Gallery Assist module for Drupal 6.x prior to Gallery Assist 6.x-1.7 Drupal core is not affected. I...

Joomla DJ Catalog SQL Injection

----------------------------------------------------------------------------------------- joomla comdjcatalog component SQL/bsql Injection Multiple Vulnerability ----------------------------------------------------------------------------------------- Author : Chip D3 Bi0s Email :...

Joomla Component com_djcatalog SQL/bSQL Injection Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------- joomla comdjcatalog component SQL/bsql Injection Multiple Vulnerability ----------------------------------------------------------------------------------------- Author :...

Batch Picture Watemark 1.0 (.jpg File) Local Crash PoC

Exploit for unknown platform in category dos / poc ====================================================== Batch Picture Watemark 1.0 .jpg File Local Crash PoC ====================================================== Anti-Security Research Team & Security Institute + Bug : Batch Picture Watemark v1....

Shutter 0.1.1 SQL Injection

------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --Shutter v-0.1.1-- ------------------------------------------------------------- CMS INFORMATION: --WEB: http://shutter.tenfourzero.net/ --DOWNLOAD: http://shutter.tenfourzero.net/ --DEMO:...

MULTIPLE SQL INJECTION VULNERABILITIES --Shutter v-0.1.1-->

------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --Shutter v-0.1.1-- ------------------------------------------------------------- CMS INFORMATION: --WEB: http://shutter.tenfourzero.net/ --DOWNLOAD: http://shutter.tenfourzero.net/ --DEMO:...

Shutter 0.1.1 - Multiple SQL Injections

Shutter 0.1.1 - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Shutter 0.1.1 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Shutter 0.1.1 Multiple Remote SQL Injection Vulnerabilities ===========================================================...

ST-Gallery 0.1a Multiple SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

ST-Gallery 0.1a - Multiple SQL Injections

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | SQL INJECTIO...

Mambo Component galleries 1.0 (aid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl -w Mambo Component galleries v 1.0 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : bugtr4cker & Stack & HaCkeREgY & Hak3r-b0y & All friends & All muslims HaCkeRs : ScriptName: "Mambo" ComponentName:...

Mambo Component Galleries 1.0 - aid SQL Injection

Mambo Component Galleries 1.0 - aid SQL Injection !/usr/bin/perl -w Mambo Component galleries v 1.0 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : bugtr4cker & Stack & HaCkeREgY & Hak3r-b0y & All friends & All muslims HaCkeRs : ScriptName: "Mambo"...

mambogalleries-sql.txt

!/usr/bin/perl -w Mambo Component galleries v 1.0 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : bugtr4cker & Stack & HaCkeREgY & Hak3r-b0y & All friends & All muslims HaCkeRs : ScriptName: "Mambo" ComponentName: galleries v 1.0 galleries 10/04/2006...

Mambo Component Galleries 1.0 - 'aid' SQL Injection

!/usr/bin/perl -w Mambo Component galleries v 1.0 Remote SQL Injection Found by : Houssamix From H-T Team H-T Team HouSSaMix + ToXiC350 Greetz : bugtr4cker & Stack & HaCkeREgY & Hak3r-b0y & All friends & All muslims HaCkeRs : ScriptName: "Mambo" ComponentName: galleries v 1.0 galleries 10/04/2006...

Mambo Component galleries 1.0 (aid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================ Mambo Component galleries 1.0 aid Remote SQL Injection Exploit ================================================================ !/usr/bin/perl -w Mambo Component galleries v...

ASP Photo Gallery 1.0 - Multiple SQL Injections

ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities Date : 12-january-2008 Risk : Medium Vendor URL : http://www.matteobinda.com/apg.php Google Dork : "download this free gallery at matteobinda.com" : allinurl: imgbig.asp?id= Found By : Ruben Ventura Piña Trew Contact Info :...

CVE-2007-4260

EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arbitrary galleries by specifying this username...

CVE-2007-4260

EZPhotoSales 1.9.3 and earlier has a default "admin" account for galleries, which allows remote attackers to access arbitrary galleries by specifying this username...

CVE-2007-4262

Unrestricted file upload vulnerability in EZPhotoSales 1.9.3 and earlier allows remote authenticated administrators to upload and execute arbitrary PHP code under OnlineViewing/galleries/...

CVE-2007-4259

EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via 1 a direct request for a URL under OnlineViewing/galleries/ or 2 navigation of the gallery user interface with JavaScript disabled...