36 matches found
EUVD-2009-4579
Malware in sbrugna...
EUVD-2009-4592
Malware in sbrugna...
EUVD-2009-3946
Malware in sbrugna...
Moa Gallery <= 1.2.0 (p_filename) Remote File Disclosure Vulnerability
No description provided by source. Moa Gallery = 1.2.0 Remote File Disclosure Vulnerability Code In sources\templateparser.php $filename = $MOAPATH.templates/.$templatename./.$pfilename; $fp = @fopen$filename, r; if !$fp && isbool$fp $fp = $fp = @fopen$MOAPATH.templates/MoaDefault/.$pfilename, r;...
Moa Gallery <= 1.2.0 - Multiple Remote File Inclusion Vulnerabilities
No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&...
Moa Gallery 1.2.6 Multiple Vulnerabilities
Exploit for php platform in category web applications !/usr/bin/php Exploit Title : Moa Gallery 1.2.6 Multiple Vulnerabilities Date : 5/17/2013 Author: Slotleet Slotleet GMAIL com https://fb.com/Slotleet Vendor Homepage: http://www.moagallery.net/ Version affected : 1.2.6 Tested on: WIN 7 Xd4rk...
CVE-2009-4614
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the MOAPATH parameter to 1 errorfuncs.php, 2 integrityfuncs.php, 3 templatecomponentadmin.php, 4 templatecomponentgallery.php, 5 templateparser.php...
CVE-2009-4627
Directory traversal vulnerability in sources/templateparser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pfilename parameter, a different issue than CVE-2009-4614...
Directory traversal
Directory traversal vulnerability in sources/templateparser.php in Moa Gallery 1.2.0 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the pfilename parameter, a different issue than CVE-2009-4614...
CVE-2009-4627
CVE-2009-4627 : Directory traversal in Moa Gallery 1.2.0 and earlier. The issue occurs in sources/_template_parser.php via the p_filename parameter, where a ".." path segment enables reading arbitrary files. This is a targeted file access vulnerability in Moa Gallery, with no remediation details ...
CVE-2009-4614
MoA Gallery 1.2.0 and earlier are affected by multiple PHP remote file inclusion flaws. By supplying a URL in the MOA_PATH parameter to 18 PHP sources (e.g., _error_funcs.php, _template_parser.php, page_sitemap.php, etc.), an attacker can cause arbitrary PHP code execution on affected systems. Th...
CVE-2009-4614
Multiple PHP remote file inclusion vulnerabilities in Moa Gallery 1.2.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the MOAPATH parameter to 1 errorfuncs.php, 2 integrityfuncs.php, 3 templatecomponentadmin.php, 4 templatecomponentgallery.php, 5 templateparser.php...
Sql injection
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the galleryid parameter in a galleryview action...
CVE-2009-3975
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the galleryid parameter in a galleryview action...
CVE-2009-3975
SQL injection vulnerability in index.php in Moa Gallery 1.1.0 and 1.2.0 allows remote attackers to execute arbitrary SQL commands via the galleryid parameter in a galleryview action...
CVE-2009-3975
The CVE-2009-3975 entry concerns Moa Gallery (versions 1.1.0 and 1.2.0). The vulnerability is a SQL injection in index.php, exploitable via the gallery_view action’s gallery_id parameter, allowing remote attackers to execute arbitrary SQL commands. Severity in NVD is Medium (CVSS v2: AV:N/AC:M/Au...
Moa Gallery <= 1.2.0 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% &&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&...
Moa Gallery 1.2.0 (index.php action) SQL Injection Vulnerability
No description provided by source. Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php action Moa Gallery 1.2.0 www.moagallery.net AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...
Moa Gallery 1.2.0 - index.php?action SQL Injection
Moa Gallery 1.2.0 - index.php?action SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability index.php action Moa Gallery 1.2.0 www.moagallery.net AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: Exploite :-...
Moa Gallery 1.2.0 File Disclosure
Moa Gallery = 1.2.0 Remote File Disclosure Vulnerability Code In sources\templateparser.php $filename = $MOAPATH."templates/".$templatename."/".$pfilename; $fp = @fopen$filename, "r"; if !$fp && isbool$fp $fp = $fp = @fopen$MOAPATH."templates/MoaDefault/".$pfilename, "r"; POC...