3268 matches found
CVE-2003-1498
CVE-2003-1498 is an XSS vulnerability in WRENSOFT Zoom Search Engine, affecting version 2.0 Build 1018 and earlier. The vulnerability arises from improper handling of the zoom_query parameter in search.php, allowing remote attackers to inject arbitrary web script or HTML. The available documents ...
CVE-2003-1498
Cross-site scripting XSS vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoomquery parameter...
CVE-2007-1992
Multiple PHP remote file inclusion vulnerabilities in the comzoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 EXIFMakernote.php or 2 EXIF.php in classes/iptc/...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
No description provided by source. iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; //...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Mambo Component zOOm Media Gallery array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags array...
Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion
Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array ,...
Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion
iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags arr...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags arr...
CVE-2007-1920
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php...
SmodBIP <= 1.06 (aktualnosci zoom) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== SmodBIP 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$...
SmodBIP 1.06 - aktualnosci zoom SQL Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d...
CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...
DEBIAN-CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...
CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...
CVE-2005-1079
SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
zOOM Media Gallery - Simple SQL Injection discovery
Description: zOOm Media Gallery http://zoom.ummagumma.nl is a php/sql component+module for MamboCMS and is in use by many sites of the internet. I discover a simple SQL Injection in it. Affected Versions: zOOm Image Gallery 2.1.2, POC: It is possible to proof my concept using the original site of...
CVE-2005-1079
The CVE-2005-1079 entry describes a SQL injection in zOOm Media Gallery 2.1.2 through the catid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software: zOOm Media Gallery 2.1.2 (index.php vulnerability in catid). Root cause: unsafely concatenated us...
CVE-2005-1079
SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
[VulnWatch] zOOM Media Gallery - Simple SQL Injection discovery
Description: zOOm Media Gallery http://zoom.ummagumma.nl is a php/sql component+module for MamboCMS and is in use by many sites of the internet. I discover a simple SQL Injection in it. Affected Versions: zOOm Image Gallery 2.1.2, POC: It is possible to proof my concept using the original site of...
Zoom Media Gallery 2.1.2 - index.php SQL Injection
Zoom Media Gallery 2.1.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in ...