107 matches found
CVE-2006-2157
SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...
Sql injection
SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...
CVE-2006-2157
CVE-2006-2157 targets Plogger Beta 2.1 and earlier, with a SQL injection in gallery.php via the id parameter when level is set to "slideshow". The vulnerability allows remote attackers to execute arbitrary SQL commands, as described in the NVD entry and related records. Affected component: Plogge...
CVE-2006-2157
SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...
Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit
Exploit for unknown platform in category web applications ================================================================= Plogger works with magicquotesgpc = Off\r\n\r\n"; echo "dork: intext:"Powered by Plogger!" -plogger.org\r\n\r\n"; if $argc3 echo "Usage: php ".$argv0." host path...
Plogger <= Beta 2.1 Administrative Credentials Disclosure Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo "Plogger = Beta 2.1 SQL injection / administrative credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "- works with magicquotesgpc = Off\r\n\r\n...
Plogger Beta 2.1 - Administrative Credentials Disclosure
Plogger Beta 2.1 - Administrative Credentials Disclosure !/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "dork: intext:"Powered by Plogger!" -plogger.org\r\n\r\n"; if $argc3 echo "Usage: php ".$argv0." host path OPTIONS\r\n"; echo "host: target server...
Plogger Beta 2.1 - Administrative Credentials Disclosure
!/usr/bin/php -q -d shortopentag=on works with magicquotesgpc = Off\r\n\r\n"; echo "dork: intext:"Powered by Plogger!" -plogger.org\r\n\r\n"; if $argc3 echo "Usage: php ".$argv0." host path OPTIONS\r\n"; echo "host: target server ip/hostname\r\n"; echo "path: path to plogger\r\n"; echo...
Sql-инъекция и межсайтовый скриптинг в Plogger Photo Gallery
Здравствуйте, 3APA3A. свежая порция: Software: Plogger Photo Gallery = 2.1 Vendor: Plogger www.plogger.org Vulnerability: Sql-инъекция и межсайтовый скриптинг Risk: средний Date: 10.01.2006 discovered by durito -duritoatmaildotru- HTTP: all-about-all.net durito.narod.ru +:| Details |: Уязвимость...
Plogger exploit method! - Vulnerability warning-the black bar safety net
http://www.hackeroo.com/Plogger 是 一 款 基于 PHP 的 网络日记 程序 the. Plogger does not filter the user submits the URI of the data, exploit vulnerabilities in the WEB permissions to execute arbitrary commands. Vulnerability in'plog-admin-functions.php'script for user-submitted'configbasedir'parameter is no...
CVE-2005-4573
PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute arbitrary code via a URL in the configbasedir parameter...
CVE-2005-4573
Plogger (Beta 2) is affected by CVE-2005-4573 via plog-admin-functions.php where unsanitized input in config[basedir] is used in a PHP require_once, enabling remote file inclusion and potential arbitrary code execution if register_globals is enabled. Affected component: admin/plog-admin-functions...
CVE-2005-4573
PHP remote file include vulnerability in plog-admin-functions.php in Plogger Beta 2 allows remote attackers to execute arbitrary code via a URL in the configbasedir parameter...
Plogger plog-admin-functions.php config Parameter Remote File Inclusion
The remote host appears to be running Plogger, an open source photo gallery written in PHP. The version of Plogger installed on the remote host fails to sanitize user-supplied input to the 'configbasedir' parameter of the 'admin/plog-admin-functions.php' script before using it in a PHP...
Plogger Beta 2 - Remote File Inclusion
Plogger Beta 2 - Remote File Inclusion source: https://www.securityfocus.com/bid/15992/info Plogger is prone to a remote file include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the Web server...
Plogger Beta 2 - Remote File Inclusion
source: https://www.securityfocus.com/bid/15992/info Plogger is prone to a remote file include vulnerability. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the Web server process. This may facilitate a...
CVE-2005-4247
Cross-site scripting XSS vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter...
CVE-2005-4246
SQL injection vulnerability in Plogger Beta 2 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 id parameter to index.php and 2 page parameter...
CVE-2005-4247
Cross-site scripting XSS vulnerability in index.php in Plogger Beta 2 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchterms parameter...
CVE-2005-4246
Plogger Beta 2 and earlier are affected by a SQL injection vulnerability. The issue allows remote attackers to inject arbitrary SQL commands via the (1) id parameter to index.php and (2) the page parameter, indicating input unsanitization in the application’s query construction. The observed impa...