CVE-2007-1478

CVE-2007-1478 affects McGallery 0.5b where download.php can be abused to read arbitrary files and reveal script source code via the filename parameter. This is a remote-access risk (attack surface via web requests) that enables partial confidentiality loss. The available documents describe the vu...

McGallery 0.5b (download.php) Arbitrary File Download Vulnerability

No description provided by source. Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker The Am0s Team...

McGallery 0.5b - download.php Arbitrary File Download

McGallery 0.5b - download.php Arbitrary File Download Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker...

McGallery 0.5b (download.php) Arbitrary File Download Vulnerability

Exploit for unknown platform in category web applications =================================================================== McGallery 0.5b download.php Arbitrary File Download Vulnerability =================================================================== Piker McGallery 0.5b Arbitrary File...

McGallery 0.5b - 'download.php' Arbitrary File Download

Piker McGallery 0.5b Arbitrary File Download Vulnerability Affected software: McGallery 0.5b Vendor: http://sourceforge.net/projects/mcgallery/ Dork: allintitle: "MCgallery 0.5b" http://target/path/download.php?filename=main.php Found by Piker The Am0s Team Greetz: KX-T33, kakalake, nAzGuL, Putus...

CVE-2005-4252

Cross-site scripting XSS vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters...

CVE-2005-4251

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 start, and 3 rand parameters to show.php, and the 4 album parameter to index.php...

CVE-2005-4250

Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter...

CVE-2005-4252

CVE-2005-4252 describes a cross-site scripting (XSS) vulnerability in mcGallery PRO 2.2 and earlier . The issue allows remote attackers to inject arbitrary web script or HTML via unspecified parameters of the search module. The NVD entry records a CVSS v2 base score of 4.3 (Medium) with attack ve...

CVE-2005-4251

CVE-2005-4251 affects mcGallery PRO 2.2 and earlier, with multiple SQL injection flaws that allow remote execution of arbitrary SQL via parameters (id, start, rand in show.php; album in index.php). The vulnerability is documented in the NVD entry and related CVE references; base score 7.5 (High) ...

CVE-2005-4250

CVE-2005-4250 affects mcGallery PRO 2.2 and earlier, with a directory traversal vulnerability that allows remote attackers to read arbitrary files through the language parameter. The NVD entry notes a Partial Confidentiality impact (NETWORK access, low complexity, no authentication), but exploita...

CVE-2005-4250

Directory traversal vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to read arbitrary files via the language parameter...

CVE-2005-4251

Multiple SQL injection vulnerabilities in mcGallery PRO 2.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id, 2 start, and 3 rand parameters to show.php, and the 4 album parameter to index.php...

CVE-2005-4252

Cross-site scripting XSS vulnerability in mcGallery PRO 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search module parameters...

McGallery 1.01.12.2 - show.php Multiple SQL Injections

McGallery 1.01.12.2 - show.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation o...

mcGallery PRO vuln.

mcGallery PRO vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/mcgallery-pro-vuln.html vendor:http://mcgallerypro.com/ affected version: 2.2 and prior Product Description: A Pro version of mcGallery. Features: Displays photos, videos and Flash...

McGallery 1.01.12.2 - index.php?language Traversal Local File Inclusion

McGallery 1.01.12.2 - index.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successf...

McGallery 1.01.12.2 - index.php?album SQL Injection

McGallery 1.01.12.2 - index.php?album SQL Injection source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of...

McGallery 1.0/1.1/2.2 - 'index.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of...

McGallery 1.0/1.1/2.2 - 'show.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/15845/info mcGallery PRO is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities could result in a compromise of...