Wabbit PHP Gallery => 0.9 Remote Traversal Directory

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM Wabbit P...

wabbit09.txt

""""""""""""""""""""""""""""""""""""""""""""""" """ :: :: ::::: :::: """ """ :: :: :: : :: """ """ :::: :: :: ::::: ::::: :::: """ """ :: :: ::: ::: :: :: :: :: :: """ """ :: :: :: : : ::::: :: :: :::: """ """ """ """"""""""""""""""""""""""""""""""""""""""""""" Xmor$ DigitaL Hacking TeaM Wabbit P...

Wabbit PHP Gallery 0.9 - Dir Directory Traversal

Wabbit PHP Gallery 0.9 - Dir Directory Traversal source: https://www.securityfocus.com/bid/21213/info Wabbit PHP Gallery is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit this issue to retrieve the...

captivateXSS.txt

Captivate 1.0 Homepage: http://new-place.org/scripts/ Description: A basic but highly-customizable PHP gallery script with optional thumbnail creation. Designed with screencaps in mind, it works best for large galleries of same-sized images. Effected files: gallery.php Inproper filtering of actio...

CVE-2006-2210

Cross-site scripting XSS vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this issue might be resultant from the directory traversal vulnerability...

CVE-2006-2211

321soft PhP-Gallery 0.9 is affected by an absolute path traversal in index.php via the path parameter. This allows remote attackers to browse arbitrary directories on the server. No remediation details are provided in the supplied documents; verify with vendor advisories or updates for a patched ...

CVE-2006-2211

Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter...

321soft PhP Gallery 0.9 - directory travel & XSS

321soft PhP Gallery 0.9 - directory travel & XSS -------------------------------------------------------- Software: 321soft PhP Gallery Version: 0.9 Type: directory travel & XSS Date: Mai 3 01:38:04 CEST 2006 Vendor: 321soft.de Page: http://321soft.de/ Risc: Middle credits:...

CVE-2006-2210: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to inject arbitrary web script or HTML via the path parameter. NOTE: this issue might be resultant from the directory traversal vulnerability...

CVE-2006-2211: Undefined Security Weakness

Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter...

321soft PHP-Gallery 0.9 - index.php?path Arbitrary Directory Listing

321soft PHP-Gallery 0.9 - index.php?path Arbitrary Directory Listing source: https://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly...

321soft PHP-Gallery 0.9 - index.php?path Cross-Site Scripting

321soft PHP-Gallery 0.9 - index.php?path Cross-Site Scripting source: https://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize...

321soft PHP-Gallery 0.9 - 'index.php?path' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17812/info PhP-Gallery is prone to an information-disclosure vulnerability and a cross-site scripting vulnerability. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabiliti...

Path traversal

Enhanced Simple PHP Gallery 1.7 allows remote attackers to obtain the full path of the application via a direct request to sphelperfunctions.php, which leaks the pathname in an error message...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-0112

Cross-site scripting XSS vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-0112

CVE-2006-0112 is an XSS vulnerability in the file index.php of Enhanced Simple PHP Gallery 1.7 , allowing remote attackers to inject arbitrary script or HTML via the dir parameter. The connected records (NVD/NVD-derived entries, PRION, CVELIST) reiterate the same description and do not provide pa...

CVE-2006-0113

CVE-2006-0113 affects Enhanced Simple PHP Gallery 1.7. The issue arises when an attacker can trigger a direct request to sp_helper_functions.php, causing an error message to leak the application’s full path (pathname). This is a path-traversal/information-disclosure symptom that could aid targeti...

CVE-2006-0112

Cross-site scripting XSS vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...

CVE-2006-0112: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in Enhanced Simple PHP Gallery 1.7 allows remote attackers to inject arbitrary web script or HTML via the dir parameter...