snipe gallery Script SQL Injection

No description provided by source. Exploit Title: snipe gallery Script Sql Injection Date: 26/06/2010 Author: dev!l ghost Email: awsatlivedotit Site : www.h00forall.com Script url: http://sourceforge.net/projects/snipegallery/ Version: 3.1.5 Tested on: Windows CVE : :::::::::::::::::::::::::...

Joomla Phoca Gallery Component (com_phocagallery) SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------------------- Founded by RoAdKiLlEr Team: Albanian Hacking Crew Contact: RoAdKiLlEratKhg-CrewdotWs Home: http://a-h-crew.net Download...

Click Gallery Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/21311/info Click Gallery is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because the application fails to sufficiently sanitize user-supplied data...

Buddy Zone <= 1.5 - Multiple SQL Injection Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ Buddy Zone Version 1.5 And Prior SQL Injection Vulnerability +==-- --==+================================================================================+==-- AUTHOR:...

SoftBiz Image Gallery 0 insert_rating.php img_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/17339/info Softbiz Image Gallery is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A...

Coppermine Photo Gallery 1.4.10 Multiple Remote And Local File Include Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/22409/info Coppermine Photo Gallery is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to execute arbitra...

321soft PhP-Gallery 0.9 index.php path Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attack...

YVS Image Gallery SQL Injection

No description provided by source. -=+ Application: YVS Image Gallery -=+ Version: 0.0.0.1 -=+ Vendor's URL: http://yvs.vacau.com/gallery.html -=+ Platform: Windows\Linux\Unix -=+ Bug type: Sql INJECTIONS -=+ Exploitation: Remote -=- -=+ Author: Corrado Liotta Aka CorryL corryl80atgmaildotcom -=+...

Coppermine Photo Gallery <= 1.4.20 (IMG) Privilege Escalation Exploit

No description provided by source. !/usr/bin/perl inphex - inphex0 at gmail dot com based on http://milw0rm.com/exploits/8114 - found by StAkeR In case this does not work check out posLine 80 and find another value for it use IO::Socket; use LWP::UserAgent; use LWP::Simple; use HTTP::Cookies; $1 ...

XennoBB 1.0.5/1.0.6/2.1/2.2 Profile.PHP Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19446/info XennoBB is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable syst...

Xtreme ASP Photo Gallery 2.0 displaypic.asp sortorder Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21138/info Xtreme ASP Photo Gallery is prone to multiple input-validation vulnerabilities, including cross-site scripting and SQL-injection issues and an HTML-injection issue because the application fails to properly...

Coppermine Photo Gallery 1.x init.inc.php Remote File Inclusion

No description provided by source. source: http://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly...

Coppermine Photo Gallery <= 1.3.2 File Retrieval SQL Injection Exploit

No description provided by source. tested and approved /str0ke CPG Exploit File Retrieval by SQL Injection. By Default this exploit get the config.inc.php file which contains the db user/pass If you want to get another file you need to have the good cookie you can use this phpscript to get good...

Joomla Component Ignite Gallery 0.8.3 - SQL Injection Vulnerability

No description provided by source. !/usr/bin/env python coding: utf-8 from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register import re class TestPOCPOCBase: vulID = '65822' ssvid version = '1.0' author = 'kikay' vulDate = '2009-02-19' createDate ...

ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities

No description provided by source. ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities Date : 12-january-2008 Risk : Medium Vendor URL : http://www.matteobinda.com/apg.php Google Dork : download this free gallery at matteobinda.com : allinurl: imgbig.asp?id= Found By : Ruben Ventura Pi...

4images - Image Gallery Management System - [CSRF] Change mail user or admin

No description provided by source. Title: 4images - Image Gallery Management System - CSRF Change mail user or admin Author: Dmar al3noOoz Mail : wafeesathotmail.com Name : 4images - Image Gallery Management System dork : Google Dork: 4images - Image Gallery Management System Software Link :...

JV2 Folder Gallery <= 3.0 - Remote File Include Vulnerability

No description provided by source. Greatz to:AsB-MaY TeAm & HaCk.eGy & To0oFa ScRiPt:-http://foldergallery.jv2.net/download.php?file=foldergallery3.0.2 Discovered By:- ThE dE@Th AsB-MaY DiScOvEr ExPlIoTs TeAm template.php:- ?php include $galleryfilesdir./galleryfooter.php; ? ExPlOiT:...

joomla component archaic binary gallery 0.2 - Directory Traversal vuln

0x01漏洞简介 joomla组件archaic binary gallery版本0.2存在目录遍历的漏洞。远策会难过攻击者可以利用该漏洞遍历/ images/gallery下的目录机器子目录的内容。 0x02漏洞验证 该漏洞利用的POC如下所示： http://XXX/index.php?option=comabgallery&Itemid=37&gallery=../../../ 结果如下： 还可以进入子目录进行遍历： 0x03修复方案 对提交的请求参数进行检查过滤即可。 Joomla Component Archaic Binary Gallery Directory...

Invision Power Services Invision Gallery 1.0.1/1.3 - SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13907/info Invision Gallery is affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script before using it in an SQL...

FOSS Gallery Admin <= 1.0 - Remote Arbitrary Upload Exploit

No description provided by source. ! /usr/bin/perl -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- FOSS Gallery Admin Version = 1.0 / Remote Arbitrary Upload Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Program: FOSS Gallery Adm...