Mambo Component zOOm Media Gallery 2.5 Beta 2 - Remote File Inclusion

iskorpitx@metlak from TURKEY comzoom file include / // Create the Makernote Parser and Interpreter Function Array $GLOBALS'MakernoteFunctionArray' = array "ReadMakernoteTag" = array , "getMakernoteTextValue" = array , "InterpretMakernotetoHTML" = array ; // Include the Main TIFF and EXIF Tags arr...

CVE-2007-1920

SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php...

CVE-2007-1920: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php...

SmodBIP <= 1.06 (aktualnosci zoom) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== SmodBIP 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$...

SmodBIP 1.06 - aktualnosci zoom SQL Injection

126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; return $exa."\r\n".$result; $proxyregex = '\b\d1,3.\d1,3.\d...

CVE-2005-3178

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...

DEBIAN-CVE-2005-3178

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...

CVE-2005-3178

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...

CVE-2005-3178: Undefined Security Weakness

Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during 1 zoom, 2 reduce, or 3 rotate operations...

CVE-2005-1079

SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

zOOM Media Gallery - Simple SQL Injection discovery

Description: zOOm Media Gallery http://zoom.ummagumma.nl is a php/sql component+module for MamboCMS and is in use by many sites of the internet. I discover a simple SQL Injection in it. Affected Versions: zOOm Image Gallery 2.1.2, POC: It is possible to proof my concept using the original site of...

CVE-2005-1079

The CVE-2005-1079 entry describes a SQL injection in zOOm Media Gallery 2.1.2 through the catid parameter in index.php, allowing remote attackers to execute arbitrary SQL commands. Affected software: zOOm Media Gallery 2.1.2 (index.php vulnerability in catid). Root cause: unsafely concatenated us...

CVE-2005-1079

SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2005-1079: Undefined Security Weakness

SQL injection vulnerability in index.php for zOOm Media Gallery 2.1.2 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

Zoom Media Gallery 2.1.2 - index.php SQL Injection

Zoom Media Gallery 2.1.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in ...

[VulnWatch] zOOM Media Gallery - Simple SQL Injection discovery

Description: zOOm Media Gallery http://zoom.ummagumma.nl is a php/sql component+module for MamboCMS and is in use by many sites of the internet. I discover a simple SQL Injection in it. Affected Versions: zOOm Image Gallery 2.1.2, POC: It is possible to proof my concept using the original site of...

CVE-2004-0680

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

CVE-2004-0680

The CVE concerns the Zoom X3 ADSL modem: a terminal on port 254 can be accessed using the default HTML management password even if the HTTP interface password was changed, potentially granting remote attackers unauthorized access. No exploitation details are provided in the connected documents.

CVE-2004-0680

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

CVE-2004-0680: Undefined Security Weakness

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...