Softbiz Image Gallery index.php Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30546/info Softbiz Photo Gallery is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script co...

Coppermine Photo Gallery 1.4.x viewlog.php log Parameter Local File Inclusion

No description provided by source...

ralf image gallery <= 0.7.4 - Multiple Vulnerabilities

No description provided by source. Title: Ralf Image Gallery = 0.7.4 - Multiple Remote File Include and directory traversal Vulnerabilities ----------------------------------------------------------------- Vendor: RIG is developed and maintained by Le R'alf URL: http://rig.powerpulsar.com/...

Coppermine Photo Gallery <= 1.4.10 Remote SQL Injection Exploit

No description provided by source. !/usr/bin/php ?php if$argc 4 print \n---------------------------------------------------------; print \nAffected.scr..: Coppermine Photo Gallery = 1.4.10; print \nPoc.ID........: 19070104; print \nType..........: SQL Injection; print \nRisk.level....: Medium;...

Gallery 1.2/1.3.x Search Engine Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8288/info Gallery is prone to a cross-site scripting vulnerability. This issue is present in the search engine facility provided by the software. An attacker could exploit this issue by constructing a malicious link to th...

Iamma Simple Gallery 1.0/2.0 - Arbitrary File Upload Vulnerability

No description provided by source. Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...

PHP-Nuke Gallery 1.3 Module - 'artid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27957/info The Gallery module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Absolute Image Gallery 2.0 (gallery.asp categoryid) SQL Injection Vuln

No description provided by source...

Zenphoto - Config Update and Command Execute Vulnerability

No description provided by source. ?php / | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-26-zenphoto-config-update-and-command-execute-vulnerability/ Abysssec Inc Public Advisory Title :...

Joomla Component com_wmtpic 1.0 - SQL Injection Vulnerability

No description provided by source. 1 1 0 I'm RoAdKiLlEr member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 +Title : Joomla Component comwmtpic SQL Injection Vulnerability +Author : RoAdKiLlEr +Contact : RoAdKiLlEratKhg-CrewdotWs +Tested on : W...

WordPress Plugin DZS Video Gallery 3.1.3 - Remote and Local File Disclosure Vulnerability

No description provided by source. Exploit Title: WordPress DZS Video Gallery dzs-videogallery 3.1.3 Plugins Remote and Local File Disclosure Vulnerability only .SWF Google Dork: inurl:/wp-content/plugins/dzs-videogallery/ Vendor Homepage: http://digitalzoomstudio.net/ Version: ALL Affected File:...

minimal Gallery 0.8 - Remote File Disclosure Vulnerability

No description provided by source...

Wordpress Plugin audio gallery playlist <= 0.12 - SQL Injection

No description provided by source. Exploit Title: WordPress wp audio gallery playlist plugin = 0.12 SQL Injection Vulnerability Date: 2011-08-30 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/wp-audio-gallery-playlist.0.12.zip...

Plogger Gallery 1.0 CSRF Change Admin Password

No description provided by source. ------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/...

PHP-Nuke 7.2 - Multiple Video Gallery Module SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/10215/info Reportedly the PHP-Nuke Video Gallery module is affected by multiple SQL injection vulnerabilities. This is due to a failure of the application to properly sanitize user-supplied input prior to using it in an S...

Cycade Gallery SQL Injection Exploit

No description provided by source. Exploit Title: Cycade Gallery SQL Injection Exploit Date: 3/12/2012 Author: -DownFall Vendor or Software Link: Cycade Content Management - http://www.cycade.com/ Category: Web Apps - 0-Day Google dork: intext:Powered by Cycade inurl:gid= Tested on: Windows 7...

Invision Gallery <= 2.0.7 ReadFile() & SQL Injection Exploit (linux)

No description provided by source. / | || || | | |/ / | || | | / - | | ' | ' | / | ' \ - |||||||\|||, |||// hellknights.void.ru |/ coded by 1nf3ct0r Windows, ported by ShadOSLinux Invision Gallery = 2.0.7 ReadFile & SQL injection exploit +-------------+ | Uzage: | +-------------+ + ReadFile: -...

i-Gallery 3.4 igallery.asp Multiple Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/21122/info The i-gallery application is prone to multiple-input validation vulnerabilities, including multiple cross-site scripting vulnerabilities and an HTML-injection issue, because the software fails to sufficiently...

Nucleus Plugin Gallery RFI & SQLi Vulnerability

No description provided by source. ============================================================================================================= o Nucleus Plugin Gallery RFI & SQLi Vulnerability Software : NPGallery version 0.94 Download :...

i-Gallery 3.4 igallery.ASP Remote Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/26348/info i-Gallery is prone to a remote information-disclosure vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view arbitrary local...