Lucene search
+L

108 matches found

zdt
zdt
added 2008/10/14 12:0 a.m.22 views

PhpWebGallery <= 1.7.2 Session Hijacking / Code Execution Exploit

Exploit for unknown platform in category web applications ================================================================= PhpWebGallery $b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/10/14 12:0 a.m.25 views

PHPWebGallery 1.7.2 - Session Hijacking / Code Execution

$b'.$sort.';' 64. ; An attacker could be able to inject and execute PHP code through $GET'sort', that is passed to createfunction at line 63 see https://www.securityfocus.com/bid/31398. Only admin can access to the plugins management interface, but the attacker might be able to retrieve a valid...

9CVSS5.8AI score0.07119EPSS
SaveExploits1
securityvulns
securityvulns
added 2008/09/13 12:0 a.m.61 views

PhpWebGallery 1.3.4 Multiple Vulnerabilities &#40;XSS/LFI&#41;

---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Multiple Vulnerabilities XSS/LFI Rist : High Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4" ---------------------------------------------------------------- Download From ...

6.9AI score
SaveExploits0
seebug.org
seebug.org
added 2008/09/13 12:0 a.m.20 views

PhpWebGallery 1.3.4 Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl -W PhpWebGallery 1.3.4 Blind SQL Injection Exploit Download: http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2 File affected: picture.php exploit written by ka0x ka0x01 at gmail dot com D.O.M Labs - Security...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/09/12 12:0 a.m.23 views

phpwebgallery134-sql.txt

!/usr/bin/perl -W PhpWebGallery 1.3.4 Blind SQL Injection Exploit Download: http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2 File affected: picture.php exploit written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/09/12 12:0 a.m.28 views

phpwebgallery-sql.txt

---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Vulnerabilities blind sql injection Author : Stack Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4" ---------------------------------------------------------------- Download...

7.4AI score
SaveExploits0
seebug.org
seebug.org
added 2008/09/12 12:0 a.m.25 views

PhpWebGallery 1.3.4 (XSS/LFI) Multiple Vulnerabilities

No description provided by source. ---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Multiple Vulnerabilities XSS/LFI Rist : High Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4"...

7.1AI score
SaveExploits0
zdt
zdt
added 2008/09/12 12:0 a.m.21 views

PhpWebGallery 1.3.4 Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== PhpWebGallery 1.3.4 Remote Blind SQL Injection Exploit ====================================================== !/usr/bin/perl -W PhpWebGallery 1.3.4 Blind SQL Injection Exploit Download...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2008/09/12 12:0 a.m.19 views

PHPWebGallery 1.3.4 - Blind SQL Injection (2)

PHPWebGallery 1.3.4 - Blind SQL Injection 2 !/usr/bin/perl -W PhpWebGallery 1.3.4 Blind SQL Injection Exploit Download: http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2 File affected: picture.php exploit written by ka0x D.O.M Labs - Security Researchers -...

0.2AI score
SaveExploits0
seebug.org
seebug.org
added 2008/09/12 12:0 a.m.68 views

PhpWebGallery 1.3.4 (cat) Blind SQL Injection Vulnerability

No description provided by source. ---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Vulnerabilities blind sql injection Author : Stack Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4"...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/09/12 12:0 a.m.39 views

PHPWebGallery 1.3.4 - Blind SQL Injection (2)

!/usr/bin/perl -W PhpWebGallery 1.3.4 Blind SQL Injection Exploit Download: http://puzzle.dl.sourceforge.net/sourceforge/phpwebgallery/phpwebgallery-1.3.4.tar.bz2 File affected: picture.php exploit written by ka0x D.O.M Labs - Security Researchers - www.domlabs.org - ka0x@domlabs:/codes$...

5.8AI score
SaveExploits0
zdt
zdt
added 2008/09/11 12:0 a.m.24 views

PhpWebGallery 1.3.4 (XSS/LFI) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== PhpWebGallery 1.3.4 XSS/LFI Multiple Vulnerabilities ====================================================== ---------------------------------------------------------------- Script :...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/09/11 12:0 a.m.28 views

PHPWebGallery 1.3.4 - Cross-Site Scripting / Local File Inclusion

---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Multiple Vulnerabilities XSS/LFI Rist : High Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4" ---------------------------------------------------------------- Download From ...

7.5CVSS5.8AI score0.02486EPSS
SaveExploits1
exploitpack
exploitpack
added 2008/09/11 12:0 a.m.46 views

PHPWebGallery 1.3.4 - Cross-Site Scripting Local File Inclusion

PHPWebGallery 1.3.4 - Cross-Site Scripting Local File Inclusion ---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Multiple Vulnerabilities XSS/LFI Rist : High Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4"...

0.5AI score
SaveExploits0
exploitpack
exploitpack
added 2008/09/11 12:0 a.m.18 views

PHPWebGallery 1.3.4 - Blind SQL Injection (1)

PHPWebGallery 1.3.4 - Blind SQL Injection 1 ---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Vulnerabilities blind sql injection Author : Stack Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4"...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2008/09/11 12:0 a.m.22 views

phpwebgallery-xsslfi.txt

---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Multiple Vulnerabilities XSS/LFI Rist : High Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4" ---------------------------------------------------------------- Download From ...

7.4AI score
SaveExploits0
zdt
zdt
added 2008/09/11 12:0 a.m.55 views

PhpWebGallery 1.3.4 (cat) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== PhpWebGallery 1.3.4 cat Blind SQL Injection Vulnerability ===========================================================...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2008/09/11 12:0 a.m.40 views

PHPWebGallery 1.3.4 - Blind SQL Injection (1)

---------------------------------------------------------------- Script : PhpWebGallery 1.3.4 Type : Vulnerabilities blind sql injection Author : Stack Google Dork : inurl:"picture.php?cat=" "Powered by PhpWebGallery 1.3.4" ---------------------------------------------------------------- Download...

5.8AI score
SaveExploits0
Prion
Prion
added 2008/08/04 7:41 p.m.16 views

Code injection

PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users by editing the user's profile...

4CVSS6.8AI score0.01152EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2008/08/04 7:41 p.m.14 views

CVE-2008-3451

PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users by editing the user's profile...

4CVSS6.3AI score0.01152EPSS
SaveExploits0References6
Rows per page
Query Builder