CVE-2012-1614: Exposure of Sensitive Information to an Unauthorized Actor

Coppermine Photo Gallery before 1.5.20 allows remote attackers to obtain sensitive information via 1 a direct request to plugins/visiblehookpoints/index.php, an invalid 2 page or 3 cat parameter to thumbnails.php, an invalid 4 page parameter to usermgr.php, or an invalid 5 newerthan or 6 oldertha...

PT-2012-3383

Name of the Vulnerable Software and Affected Versions Coppermine Photo Gallery versions prior to 1.5.20 Description The issue allows remote attackers to obtain sensitive information via various invalid parameters to different scripts, which reveals the installation path in an error message. This...

CVE-2008-2501

Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 album parameter to thumbnails.php and the 2 pid parameter to displayimage.php...

Sql injection

Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 album parameter to thumbnails.php and the 2 pid parameter to displayimage.php...

CVE-2008-2501: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in PHPhotoalbum 0.5 allow remote attackers to execute arbitrary SQL commands via the 1 album parameter to thumbnails.php and the 2 pid parameter to displayimage.php...

Directory traversal

Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

CVE-2008-1799

CVE-2008-1799 : A directory traversal vulnerability affects sabros.us 1.75. The issue resides in thumbnails.php, where remote attackers can read arbitrary files by supplying a .. (dot dot) in the img parameter. Public references confirm the flaw and the impact is read access to files, not modific...

CVE-2008-1799: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files via a .. dot dot in the img parameter...

sabros.us 1.75 (thumbnails.php) Remote File Disclosure Vulnerability

No description provided by source. Remote File Disclosure Vulnerability sabrosus 1.75 thumbnails.php AUTHOR : HaCkeREgY My HoMe : www.PaL-HaCker.com ConTacT : [email protected] Download Script :...

sabros-disclose.txt

sabrosus 1.75 thumbnails.php AUTHOR : HaCkeREgY My HoMe : www.PaL-HaCker.com ConTacT : [email protected] Download Script : http://sourceforge.net/project/downloading.php?groupname=sabrosus&filename=sabrosus1-75.zip&usemirror=garr vurn C0de : in thumbnails.php line 82 readfile $img === Dork :...

sabros.us 1.75 (thumbnails.php) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== sabros.us 1.75 thumbnails.php Remote File Disclosure Vulnerability ==================================================================== sabrosus 1.75 thumbnails.php AUTHO...

Sabros.us 1.75 - thumbnails.php Remote File Disclosure

Sabros.us 1.75 - thumbnails.php Remote File Disclosure sabrosus 1.75 thumbnails.php AUTHOR : HaCkeREgY My HoMe : www.PaL-HaCker.com ConTacT : [email protected] Download Script : http://sourceforge.net/project/downloading.php?groupname=sabrosus&filename=sabrosus1-75.zip&usemirror=garr vurn C0d...

Sabros.us 1.75 - 'thumbnails.php' Remote File Disclosure

sabrosus 1.75 thumbnails.php AUTHOR : HaCkeREgY My HoMe : www.PaL-HaCker.com ConTacT : [email protected] Download Script : http://sourceforge.net/project/downloading.php?groupname=sabrosus&filename=sabrosus1-75.zip&usemirror=garr vurn C0de : in thumbnails.php line 82 readfile $img === Dork :...

CVE-2007-1107

Coppermine Photo Gallery (CPG) 1.3.x is vulnerable to a SQL injection via the cpg131_fav cookie, allowing remote authenticated users to execute arbitrary SQL commands. The issue was later reported to affect 1.4.x versions (e.g., 1.4.10, 1.4.14) using similar cookies. A Nessus entry additionally n...

CVE-2007-1107: Undefined Security Weakness

SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery CPG 1.3.x allows remote authenticated users to execute arbitrary SQL commands via a cpg131fav cookie. NOTE: it was later reported that 1.4.10, 1.4.14, and other 1.4.x versions are also affected using similar cookies...