3672 matches found
CVE-2003-1498
Cross-site scripting XSS vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoomquery parameter...
CVE-2003-1498: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoomquery parameter...
CVE-2007-1992
Multiple PHP remote file inclusion vulnerabilities in the comzoom 2.5 beta 2 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 EXIFMakernote.php or 2 EXIF.php in classes/iptc/...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
No description provided by source. iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; //...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Mambo Component zOOm Media Gallery array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags array...
Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion
Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array ,...
Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion
iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags arr...
Mambo Component zOOm Media Gallery <= 2.5 Beta 2 RFI Vulnerabilities
iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags arr...
CVE-2007-1920
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php...
CVE-2007-1920: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php...
SmodBIP <= 1.06 (aktualnosci zoom) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =============================================================== SmodBIP 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$...
SmodBIP 1.06 - aktualnosci zoom SQL Injection
126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d...
CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...
DEBIAN-CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...
CVE-2005-3178
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...
CVE-2005-3178: Undefined Security Weakness
Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...
CVE-2005-1079
SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
zOOM Media Gallery - Simple SQL Injection discovery
Description: zOOm Media Gallery http://zoom.ummagumma.nl is a php/sql component+module for MamboCMS and is in use by many sites of the internet. I discover a simple SQL Injection in it. Affected Versions: zOOm Image Gallery 2.1.2, POC: It is possible to proof my concept using the original site of...
CVE-2005-1079
The CVE-2005-1079 entry describes a SQL injection in zOOm Media Gallery 2.1.2 through the catid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software: zOOm Media Gallery 2.1.2 (index.php vulnerability in catid). Root cause: unsafely concatenated us...