9 matches found
EUVD-2005-2200
Malware in sbrugna...
Piwigo 2.7.2 Cross Site Scripting / SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Piwigo - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor: http://www.piwigo.org/ Vendor Name: Piwigo Version: 2.7....
CVE-2008-1711
CVE-2008-1711 affects Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0, where passwords are stored in cleartext in a MySQL database. The underlying issue is insecure, unencrypted password storage, which enables threat actors with access to the database to directly obtain sensitive cr...
LinPHA include/img_view.class.php order parameter SQL Injection
The remote host is running LinPHA, a web photo gallery application written in PHP. The version of LinPHA installed on the remote host fails to sanitize input to the 'order' parameter of the 'newimages.php' script before using it in the 'setSql' function in 'include/imgview.class.php' in a databas...
LinPHA <= 1.1 Multiple Vulnerabilities
Binary data 3426.prm...
Plogger SQL&XSS vuln.
Plogger SQL&XSS vuln. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plogger-sqlxss-vuln.html vendor:http://www.plogger.org/ affected version:Beta 2 and prior Product Description: Plogger is the definitive open-source web photo gallery. Simple to...
CVE-2005-2199
PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the configpparootpath variable...
CVE-2005-2199
PHP remote file inclusion vulnerability in inc/functions.inc.php in PPA web photo gallery 0.5.6 allows remote attackers to execute arbitrary code via the configpparootpath variable...
CVE-2005-2199
CVE-2005-2199 affects the PPA web photo gallery (version 0.5.6) through a flaw in the PHP script inc/functions.inc.php. The root cause is a remote file inclusion (RFI) vulnerability in the config[ppa_root_path] parameter, allowing an attacker to influence included PHP code and potentially execute...