Pixelpost 1.7.3 Multiple Persistent Cross-Site Scripting Vulnerabilities

Summary Pixelpost is an open-source, standards-compliant, multi-lingual, fully extensible photoblog application for the web. Anyone who has web-space that meets the requirements can download and use Pixelpost for free! Description Pixelpost is vulnerable to multiple cross-site scripting...

Pixelpost 1.7.3 Cross Site Scripting

-------------------------------------------------------------------- Pixelpost 1.7.3 Multiple Persistent Cross-Site Scripting Vulnerabilities Vendor: Pixelpost.org Product web page: http://www.pixelpost.org Affected version: 1.7.3 Summary: Pixelpost is an open-source, standards-compliant,...

Pixelpost 1.7.3 Multiple POST Variables SQL Injection Vulnerability

Summary Pixelpost is an open-source, standards-compliant, multi-lingual, fully extensible photoblog application for the web. Anyone who has web-space that meets the requirements can download and use Pixelpost for free! Description Pixelpost is vulnerable to an SQL Injection attack when input is...

HTB22791: File Content Disclosure in Pixelpost

Vulnerability ID: HTB22791 Reference: http://www.htbridge.ch/advisory/filecontentdisclosureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: File Content Disclosure Status: Awaiting...

HTB22792: XSS in Pixelpost

Vulnerability ID: HTB22792 Reference: http://www.htbridge.ch/advisory/xssinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: XSS Cross Site Scripting Status: Awaiting Vendor Response Ris...

HTB22794: Path disclousure in Pixelpost

Vulnerability ID: HTB22794 Reference: http://www.htbridge.ch/advisory/pathdisclousureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: Path disclousure Status: Awaiting Vendor Response...

Pixelpost 1.7.3 Cross Site Scripting / Disclosure

================================ Vulnerability ID: HTB22794 Reference: http://www.htbridge.ch/advisory/pathdisclousureinpixelpost.html Product: Pixelpost Vendor: Pixelpost http://www.pixelpost.org/ Vulnerable Version: 1.7.3 Vendor Notification: 11 January 2011 Vulnerability Type: Path disclousure...

Multiple Vulnerabilities in Pixelpost

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pixelpost which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting vulnerability in Pixelpost The vulnerability exists due to input...

pixelpost v1.7.3 CSRF change admin password

Exploit for php platform in category web applications =========================================== pixelpost v1.7.3 CSRF change admin password =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

PixelPost 1.7.3 Cross Site Request Forgery / Cross Site Scripting

1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested on: WinXp sp3 1 1 +Risk :Hight 0 0...

PixelPost 1.7.3 - Multiple Vulnerabilities

PixelPost 1.7.3 - Multiple Vulnerabilities 1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested...

PixelPost 1.7.3 - Multiple Vulnerabilities

1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested on: WinXp sp3 1 1 +Risk :Hight 0 0...

Pixelpost Add Admin Exploit (html)

Exploit for php platform in category web applications ================================== Pixelpost Add Admin Exploit html ================================== Exploit Title: Add Admin Exploit html Date: 06-06-2010 Author:Copyright 2006 Pixelpost.org Software Link: www.Pixelpost.org...

PixelPost 1.7.1 SQL Injection / XSS

=========================================== PixelPost Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com...

Directory traversal

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the languagefull parameter...

CVE-2008-3365

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the languagefull parameter...

CVE-2008-3365

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the languagefull parameter...

CVE-2008-3365

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the languagefull parameter...

CVE-2008-3365

Pixelpost 1.7.1 on Windows is affected by a directory traversal vulnerability in index.php that, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. in the language_full parameter. Root cause is a path traversal in input handling; impact...

CVE-2008-3365: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the languagefull parameter...