Wordpress post-gallery Plugin Xss vulnerabilities

The Wordpress post-gallery Plugin suffers from a Cross-Site Scripting vulnerability. Iranian Exploit DataBase Forum http://iedb.ir/acc http://iedb.ir Exploit Title : Wordpress post-gallery Plugin Xss vulnerabilities Author : Iranian Exploit DataBase Discovered By : IeDb Email : [email protected]...

phpThumb v. <= 1.7.9 Remote Command Injection Exploit

This code exploits a Remote Command Injection vulnerability in phpThumb that allows attackers to upload a shell automatically.. !/usr/bin/perl Exploit Title: phpThumb v. http://mobileworld24.pl/wp-content/themes/mobileworld24/inc/phpThumb/ use LWP::UserAgent; use HTTP::Request; $target = $ARGV0;...

CVE-2012-2910

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

CVE-2012-2910

CVE-2012-2910 affects SiliSoftware phpThumb() version 1.7.11. The vulnerability is a cross-site scripting (XSS) flaw: remote attackers can inject arbitrary web script or HTML via the following user-supplied parameters in demo/phpThumb.demo.* scripts: (1) dir in phpThumb.demo.random.php and (2) ti...

CVE-2012-2910

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

CVE-2012-2910: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in SiliSoftware phpThumb 1.7.11 allow remote attackers to inject arbitrary web script or HTML via the 1 dir parameter to demo/phpThumb.demo.random.php or 2 title parameter to demo/phpThumb.demo.showpic.php...

SiliSoftware PHPThumb() 1.7.11-201108081537 - demoPHPThumb.demo.random.php?dir Cross-Site Scripting

SiliSoftware PHPThumb 1.7.11-201108081537 - demoPHPThumb.demo.random.php?dir Cross-Site Scripting source: https://www.securityfocus.com/bid/53572/info phpThumb is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

SiliSoftware PHPThumb() 1.7.11-201108081537 - '/demo/PHPThumb.demo.showpic.php?title' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53572/info phpThumb is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

SiliSoftware phpThumb() 1.7.11 Cross Site Scripting

phpThumb v1.7.11 dir & title Cross-Site Scripting Vulnerability Vendor: SiliSoftware Product web page: http://www.silisoftware.com Affected version: 1.7.11-201108081537 Summary: phpThumb uses the GD library to create thumbnails from images JPEG, PNG, GIF, BMP, etc on the fly. The output size is...

SiliSoftware PHPThumb() 1.7.11-201108081537 - '/demo/PHPThumb.demo.random.php?dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/53572/info phpThumb is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

phpThumb() v1.7.11 (dir & title) Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications phpThumb v1.7.11 dir & title Cross-Site Scripting Vulnerability Vendor: SiliSoftware Product web page: http://www.silisoftware.com Affected version: 1.7.11-201108081537 Summary: phpThumb uses the GD library to create thumbnails from images JPE...

SiliSoftware PHPThumb() 1.7.11-201108081537 - demoPHPThumb.demo.showpic.php?title Cross-Site Scripting

SiliSoftware PHPThumb 1.7.11-201108081537 - demoPHPThumb.demo.showpic.php?title Cross-Site Scripting source: https://www.securityfocus.com/bid/53572/info phpThumb is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may...

phpThumb() v1.7.11 (dir & title) Cross-Site Scripting Vulnerability

Summary phpThumb uses the GD library to create thumbnails from images JPEG, PNG, GIF, BMP, etc on the fly. The output size is configurable can be larger or smaller than the source, and the source may be the entire image or only a portion of the original image. Description phpThumb is prone to a...

iManager Plugin 1.2.8 Arbitrary File Deletion

iManager Plugin v1.2.8 d Remote Arbitrary File Deletion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: = 1.2.8 Build 02012008 Summary: With iManager you can manage your files/images on your webserver, and it provides user interface to most of...

iGallery Plugin 1.0.0 Cross Site Scripting

iGallery Plugin v1.0.0 dir Remote Cross-Site Scripting Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: 1.0.0 Summary: iGallery uses MooTools - image resizing done dynamically using phpThumb - resized images are cached. Desc: iGallery suffers fr...

iBrowser Plugin 1.4.1 Cross Site Scripting

iBrowser Plugin v1.4.1 dir Remote Cross-Site Scripting Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: alert'zsl' http://SOMECMS/jscripts/tinymce/plugins/ibrowser/scripts/phpThumb/demo/phpThumb.demo.random.php?dir=alert'zsl'...

iBrowser Plugin v1.4.1 (dir) Remote Cross-Site Scripting Vulnerability

Summary iBrowser is an image browser plugin for WYSIWYG editors like tinyMCE, SPAW, htmlAREA, Xinha and FCKeditor developed by net4visions. It allows image browsing, resizing on upload, directory management and more with the integration of the phpThumb image library. Description iBrowser suffers...

iGallery Plugin v1.0.0 (dir) Remote Cross-Site Scripting Vulnerability

Summary iGallery uses MooTools - image resizing done dynamically using phpThumb - resized images are cached. Description iGallery suffers from a XSS vulnerability when parsing user input to the 'dir' parameter via GET method in '/scripts/pthumb/demo/phpThumb.demo.random.php'. Attackers can exploi...

iManager Plugin 1.2.8 - 'd' Arbitrary File Deletion

iManager Plugin v1.2.8 d Remote Arbitrary File Deletion Vulnerability Vendor: net4visions.com Product web page: http://www.net4visions.com Affected version: = 1.2.8 Build 02012008 Summary: With iManager you can manage your files/images on your webserver, and it provides user interface to most of...