107 matches found
Plogger 1.0-RC1 - Authenticated Arbitrary File Upload Exploit
Plogger versions prior to 1.0-RC1 suffer from a remote authenticated arbitrary file upload vulnerability. !/usr/bin/env python Exploit Title: Plogger Authenticated Arbitrary File Upload Date: Feb 2014 Exploit Author: b0z Vendor Homepage: www.plogger.org Software Link: www.plogger.org/download...
Plogger 1.0-RC1 - (Authenticated) Arbitrary File Upload
!/usr/bin/env python Exploit Title: Plogger Authenticated Arbitrary File Upload Date: Feb 2014 Exploit Author: b0z Vendor Homepage: www.plogger.org Software Link: www.plogger.org/download Version: Plogger prior to 1.0-RC1 CVE : 2014-2223 import hashlib import os import zipfile import requests...
Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Plogger = Beta 2.1 SQL injection / administrative credentials disclosure\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo - works with magicquotesgpc = Off\r\n\r\n; echo...
Plogger <= 3.0 - Remote SQL Injection Vulnerability
No description provided by source. GulfTech Security Research August 05, 2008 Vendor : Mike Johnson URL : http://www.plogger.org/ Version : Plogger = 3.0 Risk : SQL Injection Description: Plogger is a popular online gallery tool written in php that allows users to create an online gallery. It is...
Plogger 1.0 (RC1) - Multiple Vulnerabilities
No description provided by source. Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apache...
Plogger Beta 2 Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15992/info Plogger is prone to a remote file include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the Web server...
Plogger Beta 2 index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15839/info Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities cou...
Plogger Remote File Disclosure Vulnerability
No description provided by source. Plogger Remote File Disclosure Vulnerability http://www.plogger.org/ dork : Powered by Plogger! author: Mr.tro0oqy yemeni hacker email : [email protected] exp : Line 117: if $fpsource = @fopen$GET'src','rb'...
Plogger Gallery 1.0 CSRF Change Admin Password
No description provided by source. ------------------------------------------------------------------------- Software : PloggerGallery Version 1.0 Author : Or4nG.M4N Date : n/a Dork : Forbidden Software Link : http://www.plogger.org/download/...
Plogger Beta 2 index.php id Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15839/info Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities cou...
Plogger 1.0 RC1 Cross Site Request Forgery / Cross Site Scripting
Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apache REFLECTED XSS: 1...
Plogger 1.0 (RC1) - Multiple Vulnerabilities
Plogger 1.0 RC1 - Multiple Vulnerabilities Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apach...
Plogger 1.0 (RC1) - Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: email protected Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian a...
Plogger 1.0 (RC1) - Multiple Vulnerabilities
Exploit Title: Multiply vulnerabilites in plogger 1.0 RC1 Date: 03/02/2014 Exploit Author: [email protected] Vendor Homepage: http://www.plogger.org/ Software Link: http://www.plogger.org/download/ Version: 1.0 RC1 Tested on: Virtualbox debian and Apache REFLECTED XSS: 1...
Plogger - Multiple Input Validation Vulnerabilities
Plogger - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/58271/info Plogger is prone to following input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data: 1. An SQL-injection vulnerability 2. Multiple cross-site scripting...
Plogger - Multiple Input Validation Vulnerabilities
source: https://www.securityfocus.com/bid/58271/info Plogger is prone to following input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data: 1. An SQL-injection vulnerability 2. Multiple cross-site scripting vulnerabilities 3. A cross-site request forgery...
CVE-2012-5289
Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 index.php or 2 gallery.php...
Sql injection
Multiple SQL injection vulnerabilities in Plogger 1.0 RC1 allow remote attackers to execute arbitrary SQL commands via the id parameter to 1 index.php or 2 gallery.php...
CVE-2012-5289
CVE-2012-5289 affects Plogger 1.0 RC1 with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands via the id parameter to index.php or gallery.php. The connected sources (NVD, CVE lists, PRION, etc.) confirm the vulnerability description; no explicit ...
