EUVD-2006-3671

Malware in sbrugna...

PlanetGallery Gallery_admin.PHP Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/17753/info PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this issue to bypass...

Advisory: Remote command execution in planetGallery

Advisory: Remote command execution in planetGallery An admin of planetGallery is allowed to create new galleries and upload images. Because of a vulnerable regular expression, he may also upload PHP scripts and thereby execute arbitrary commands with the privileges of PHP. Details ======= Product...

CVE-2006-3676

PlanetGallery’s admin/gallery_admin.php contains a vulnerability that allows remote code execution via file uploads with a double extension, bypassing a safe-types regex and placing the file in the images directory. The flaw arises because the regex matches names like example.png.php, which PHP t...

galleryadmin.txt

google dork - inurl:planetgallery last path add to /admin/galleryadmin.php example: http://site.com/planetgallery/admin/galleryadmin.php no pass, no login, sending your shell. credits:tugr@,AlpEren...

CVE-2006-2116

planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/galleryadmin.php...

Design/Logic Flaw

planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/galleryadmin.php...

CVE-2006-2116

CVE-2006-2116 concerns the planetGallery application. The vulnerability allows remote attackers to gain administrator privileges via a direct request to the file admin/gallery_admin.php. The available connected documents confirm planetGallery as the affected product and the specific administrativ...

CVE-2006-2116

planetGallery allows remote attackers to gain administrator privileges via a direct request to admin/galleryadmin.php...

planetGallery admin login

google dork - inurl:planetgallery last path add to /admin/galleryadmin.php example: http://site.com/planetgallery/admin/galleryadmin.php no pass, no login, sending your shell. credits:tugr@,AlpEren...

PlanetGallery - Gallery_admin.php Authentication Bypass

PlanetGallery - Galleryadmin.php Authentication Bypass source: https://www.securityfocus.com/bid/17753/info PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this...

PlanetGallery - 'Gallery_admin.php' Authentication Bypass

source: https://www.securityfocus.com/bid/17753/info PlanetGallery is prone to an authentication-bypass vulnerability. The issue occurs because the affected script fails to prompt for authentication credentials. An attacker can exploit this issue to bypass authentication and gain admin access. Th...