CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2241

modules/gallery/helpers/datarest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information image files via the "full" string in the size parameter...

Design/Logic Flaw

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

Design/Logic Flaw

modules/gallery/helpers/datarest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information image files via the "full" string in the size parameter...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

Security feature bypass

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2241

The CVE-2013-2241 issue affects Gallery3 before 3.0.9, where data_rest.php could bypass access restrictions via the size parameter with the string “full,” allowing an attacker to access sensitive image files. The vulnerability is rooted in improper access control checks in the data_rest core modu...

CVE-2013-2138

The 1 uploadify and 2 flowplayer SWF files in Gallery 3 before 3.0.8 do not properly remove query parameters and fragments, which allows remote attackers to have an unspecified impact via a replay attack...

CVE-2013-2241

modules/gallery/helpers/datarest.php in Gallery 3 before 3.0.9 allows remote attackers to bypass intended access restrictions and obtain sensitive information image files via the "full" string in the size parameter...

CVE-2013-2240

The CVE-2013-2240 issue affects Gallery 3, specifically the lib/flowplayer.swf.php component used in Gallery 3 prior to version 3.0.9. The vulnerability arises because query fragments are not properly removed, which could enable a remote attacker to achieve an unspecified impact via a replay atta...

CVE-2013-2240

lib/flowplayer.swf.php in Gallery 3 before 3.0.9 does not properly remove query fragments, which allows remote attackers to have an unspecified impact via a replay attack, a different vulnerability than CVE-2013-2138...

CVE-2013-2138

The CVE-2013-2138 issue affects Gallery 3 before 3.0.8 where the uploadify and flowplayer SWF files do not properly remove query parameters and fragments, allowing an unspecified impact via a replay attack. Related entry CVE-2013-2240 notes that lib/flowplayer.swf.php in Gallery 3 before 3.0.9 al...

Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability

Title: ====== Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability Date: ===== 2013-09-17 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1080 VL-ID: ===== 1080 Common Vulnerability Scoring System: ==================================== 6....

CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

Unrestricted file upload

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2013-5962

Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in...

CVE-2013-5962

The CVE-2013-5962 entry relates to the WordPress plugin Complete Gallery Manager (before 3.3.4 rev40279). Affected component: frames/upload-images.php which permits an unrestricted file upload. Root cause: uploading a file with an executable extension allows remote attackers to access the uploade...

Piwigo 2.5.2 Cross Site Scripting

Piwigo 2.5.2 Cross Site Scripting Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode...

Piwigo 2.5.2 - Cross-Site Scripting

Piwigo 2.5.2 - Cross-Site Scripting Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode...

Piwigo 2.5.2 - Cross-Site Scripting

Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode http://localhost/piwigo/admin.php?page=batchmanager&mode=un...