39 matches found
EUVD-2009-3946
Malware in sbrugna...
EUVD-2009-4592
Malware in sbrugna...
EUVD-2009-4579
Malware in sbrugna...
Moa Gallery <= 1.2.0 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&...
Moa Gallery <= 1.2.0 (p_filename) Remote File Disclosure Vulnerability
No description provided by source. Moa Gallery = 1.2.0 Remote File Disclosure Vulnerability Code In sources\templateparser.php $filename = $MOAPATH.templates/.$templatename./.$pfilename; $fp = @fopen$filename, r; if !$fp && isbool$fp $fp = $fp = @fopen$MOAPATH.templates/MoaDefault/.$pfilename, r;...
Moa Gallery 1.2.6 Multiple Vulnerabilities
Exploit for php platform in category web applications !/usr/bin/php Exploit Title : Moa Gallery 1.2.6 Multiple Vulnerabilities Date : 5/17/2013 Author: Slotleet Slotleet GMAIL com https://fb.com/Slotleet Vendor Homepage: http://www.moagallery.net/ Version affected : 1.2.6 Tested on: WIN 7 Xd4rk...
CVE-2009-4627
Directory traversal vulnerability in sources/templateparser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pfilename parameter, a different issue than CVE-2009-4614...
CVE-2009-4614
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the MOAPATH parameter to 1 errorfuncs.php, 2 integrityfuncs.php, 3 templatecomponentadmin.php, 4 templatecomponentgallery.php, 5 templateparser.php...
Directory traversal
Directory traversal vulnerability in sources/templateparser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pfilename parameter, a different issue than CVE-2009-4614...
CVE-2009-4627
CVE-2009-4627 : Directory traversal in Moa Gallery 1.2.0 and earlier. The issue occurs in sources/_template_parser.php via the p_filename parameter, where a ".." path segment enables reading arbitrary files. This is a targeted file access vulnerability in Moa Gallery, with no remediation details ...
CVE-2009-4614
MoA Gallery 1.2.0 and earlier are affected by multiple PHP remote file inclusion flaws. By supplying a URL in the MOA_PATH parameter to 18 PHP sources (e.g., _error_funcs.php, _template_parser.php, page_sitemap.php, etc.), an attacker can cause arbitrary PHP code execution on affected systems. Th...
CVE-2009-4614
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the MOAPATH parameter to 1 errorfuncs.php, 2 integrityfuncs.php, 3 templatecomponentadmin.php, 4 templatecomponentgallery.php, 5 templateparser.php...
CVE-2009-4614: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the MOAPATH parameter to 1 errorfuncs.php, 2 integrityfuncs.php, 3 templatecomponentadmin.php, 4 templatecomponentgallery.php, 5 templateparser.php...
CVE-2009-4627: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in sources/templateparser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pfilename parameter, a different issue than CVE-2009-4614...
CVE-2009-3975
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the galleryid parameter in a galleryview action...
Sql injection
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the galleryid parameter in a galleryview action...
CVE-2009-3975
The CVE-2009-3975 entry concerns Moa Gallery (versions 1.1.0 and 1.2.0). The vulnerability is a SQL injection in index.php, exploitable via the gallery_view action’s gallery_id parameter, allowing remote attackers to execute arbitrary SQL commands. Severity in NVD is Medium (CVSS v2: AV:N/AC:M/Au...
CVE-2009-3975
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the galleryid parameter in a galleryview action...
CVE-2009-3975: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the galleryid parameter in a galleryview action...
Moa Gallery <= 1.2.0 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&...