Lucene search
K

4images171.txt

🗓️ 02 May 2006 00:00:00Reported by CrAzY CrAcKeRType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 28 Views

Bug found in 4images 1.7.1 script, leading to SQL errors and potential security vulnerabilities. Site: http://www.alshmokh.co

Code
`>>>>>>>---------------<<<<<<<  
foud by CrAzY CrAcKeR  
Site:http://www.alshmokh.com  
>>>>>>>---------------<<<<<<<  
  
Bug is found in this script 4images 1.7.1   
  
DB Error: Bad SQL Query: SELECT cat_id, cat_name, cat_description, cat_parent_id, cat_hits, cat_order, auth_viewcat, auth_viewimage, auth_download, auth_upload, auth_directupload, auth_vote, auth_sendpostcard, auth_readcomment, auth_postcomment FROM 4images_categories ORDER BY cat_order, cat_name ASC  
Table 'zaki_gallery.4images_categories' doesn't exist  
-------------  
DB Error: Bad SQL Query: SELECT cat_id, COUNT(image_id) AS new_images FROM 4images_images WHERE image_active = 1 AND image_date >= 1145405428 GROUP BY cat_id  
Table 'zaki_gallery.4images_images' doesn't exist  
-------------  
DB Error: Bad SQL Query: SELECT cat_id, COUNT(*) AS num_images FROM 4images_images WHERE image_active = 1 GROUP BY cat_id  
Table 'zaki_gallery.4images_images' doesn't exist  
-------------  
  
DB Error: Bad SQL Query: SELECT COUNT(*) as total_images FROM 4images_images WHERE image_active = 1 AND cat_id NOT IN (0)  
Table 'zaki_gallery.4images_images' doesn't exist  
-------------  
DB Error: Bad SQL Query: SELECT i.image_id, i.user_id, i.cat_id, i.image_name, i.image_rating, i.image_votes, c.cat_name, u.user_name FROM 4images_images i, 4images_categories c LEFT JOIN 4images_users u ON (u.user_id = i.user_id) WHERE i.image_active = 1 AND i.cat_id NOT IN (0) AND i.cat_id = c.cat_id ORDER BY i.image_rating DESC, i.image_name ASC LIMIT 10  
Table 'zaki_gallery.4images_images' doesn't exist  
------------  
DB Error: Bad SQL Query: SELECT i.image_id, i.user_id, i.cat_id, i.image_name, i.image_rating, i.image_votes, c.cat_name, u.user_name FROM 4images_images i, 4images_categories c LEFT JOIN 4images_users u ON (u.user_id = i.user_id) WHERE i.image_active = 1 AND i.cat_id NOT IN (0) AND i.cat_id = c.cat_id ORDER BY i.image_votes DESC, i.image_name ASC LIMIT 10  
Table 'zaki_gallery.4images_images' doesn't exist  
------------  
DB Error: Bad SQL Query: SELECT i.image_id, i.user_id, i.cat_id, i.image_name, i.image_hits, c.cat_name, u.user_name FROM 4images_images i, 4images_categories c LEFT JOIN 4images_users u ON (u.user_id = i.user_id) WHERE i.image_active = 1 AND i.cat_id NOT IN (0) AND i.cat_id = c.cat_id ORDER BY i.image_hits DESC, i.image_name ASC LIMIT 10  
Table 'zaki_gallery.4images_images' doesn't exist  
------------  
DB Error: Bad SQL Query: SELECT i.image_id, i.user_id, i.cat_id, i.image_name, i.image_downloads, c.cat_name, u.user_name FROM 4images_images i, 4images_categories c LEFT JOIN 4images_users u ON (u.user_id = i.user_id) WHERE i.image_active = 1 AND i.cat_id NOT IN (0) AND i.cat_id = c.cat_id ORDER BY i.image_downloads DESC, i.image_name ASC LIMIT 10  
Table 'zaki_gallery.4images_images' doesn't exist  
  
  
>>>>>>>---------------<<<<<<<  
  
----example(1):  
top.php?sessionid=[SQL]  
  
----example(2):  
member.php?action=mailform& user_id=366&sessionid=[SQL]  
  
----Search:  
Powered by 4images 1.7.1   
  
>>>>>>>---------------<<<<<<<  
E-mail: [email protected]  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

02 May 2006 00:00Current
7.4High risk
Vulners AI Score7.4
28