Photopost vBGallery 2.4.1 SQL Injection Vulnerability - HeapOverflow Computer Security Community & Forums : Heap Overflow.com

HeapOverflow Computer Security Community & Forums : Heap Overflow.com

		HeapOverflow Computer Security Community & Forums : Heap Overflow.com > Computer Security: Discussions > Security discussions
Photopost vBGallery 2.4.1 SQL Injection Vulnerability

Mark Forums Read

Notices

Welcome to you visitor! This community is mainly dedicated to the computer and security, if you're looking for DFind scanner or others exploits codes you will find them into the Projects section, feel free to start Blogging and remember to always keep an eye and start talking about security Advisories & public Exploits.

Security discussions Discuss about the computer security in general

Photopost vBGallery 2.4.1 SQL Injection Vulnerability

This is a discussion on "Photopost vBGallery 2.4.1 SQL Injection Vulnerability" within the Security discussions part of the Computer Security: Discussions section; Even if nothing is officially published from the authors at the time writing up this thread, it appears there is a critical security vulnerability within PhotoPost vbGallery 2.4.1, SQL injection type. It's strongly encouraged to disable the ...

Reply

2 links from elsewhere to this Post. Click to view.

#1 (permalink)

Old

04-01-08

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 28

Posts: 596

Blog Entries: 3

Thanks: 18

Thanked 8 Times in 8 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

Photopost vBGallery 2.4.1 SQL Injection Vulnerability

Even if nothing is officially published from the authors at the time writing up this thread, it appears there is a critical security vulnerability within PhotoPost vbGallery 2.4.1, SQL injection type.
It's strongly encouraged to disable the plugin waiting for further news in the source link below, this may be a false warning but also a real one.

Sources:

My site was hacked - PhotoPost Community
Forum Hacked - Need Some Assistance - vBulletin Community Forum

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

Sponsor

Advertiser

#2 (permalink)

Old

11-01-08

class101 is offline

Administrator

Join Date: May 2005

Location: France

Age: 28

Posts: 596

Blog Entries: 3

Thanks: 18

Thanked 8 Times in 8 Posts

Rep Power: 10

class101 has disabled reputation

Send a message via MSN to class101

Default

Re: Photopost vBGallery 2.4.1 SQL Injection Vulnerability

Vulnerability has been confirmed with an available fixe here, looks like a bad apache directive which has been used to upload malicious files finally:

PhotoPost vBGallery Important Security Bulletin - PhotoPost Community

__________________
Security community webmaster
100% Free Directory
100% Cool milw0rm javascript

Reply With Quote

Sponsor

Advertiser

Reply

Tags
photopost vbgallery, security, sql injection, vbgallery, vulnerability

« Microsoft Service Packs Going Out of Support - May 2007 | Big-money bug broker gives up, frustrated by red tape »

LinkBacks (?) LinkBack to this Thread: http://heapoverflow.com/f0rums/security-discussions/2850-photopost-vbgallery-2-4-1-sql-injection-vulnerability.html
Posted By	For	Type	Date
Full Disclosure: FWD: PhotoPost vBGallery Important Security Bulletin	This thread	Refback	11-01-08 14:47
Digg - Photopost vBGallery 2.4.1 SQL Injection Vulnerability	This thread	Refback	09-01-08 00:00

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Peel Shopping 3.1 (index.php rubid) SQL Injection Vulnerability	Heap	Public	0	09-12-08 17:00
Apoll 0.7b (SQL Injection) Remote Auth Bypass Vulnerability	Heap	Public	0	03-11-08 17:29
Easy Webstore 1.2 (index.php postid) Remote SQL Injection Vulnerability	Heap	Public	0	18-06-08 23:17
PHP-Nuke Module books SQL (cid) Remote SQL Injection Vulnerability	Heap	Public	0	18-02-08 17:54
Wordpress plugin fGallery 2.4.1 fimrss.php SQL Injection Vulnerability	Heap	Public	0	28-01-08 02:57

heapoverflow.com - SEOmeter SEO tools

Locations of visitors to this page

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37