1496 matches found
CVE-2006-6632
CVE-2006-6632 affects Genepi 1.6 and earlier. A PHP remote file inclusion flaw in genepi.php allows an attacker to execute arbitrary PHP code by supplying a URL in the topdir parameter. The vulnerability’s CVSS v2 base score is 6.8 (Medium) with network access, requiring no authentication and par...
DSA-1234-1 ruby1.6
Bulletin has no description...
Rialto 1.6[admin login bypass & multiples injections sql]
vendor site: http://www.grandora.com/ product : Rialto 1.6 bug:multiples injection sql , login bypass , xss risk : high ! admin login bypass : /admin/default.asp username: ' or '1' = '1 passwd: ' or '1' = '1 injection sql : /listfull.asp?ID='sql /listmain.asp?cat='sql /printmain.asp?ID='sql...
rialto16.txt
vendor site: http://www.grandora.com/ product : Rialto 1.6 bug:multiples injection sql , login bypass , xss risk : high ! admin login bypass : /admin/default.asp username: ' or '1' = '1 passwd: ' or '1' = '1 injection sql : /listfull.asp?ID='sql /listmain.asp?cat='sql /printmain.asp?ID='sql...
Grandora Rialto 1.6 - 'searchmain.asp?cat' Cross-Site Scripting
source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...
Grandora Rialto 1.6 - 'listmain.asp?cat' SQL Injection
source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...
Grandora Rialto 1.6 - searchoption.asp Multiple SQL Injections
Grandora Rialto 1.6 - searchoption.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-suppli...
Grandora Rialto 1.6 - listfull.asp?ID SQL Injection
Grandora Rialto 1.6 - listfull.asp?ID SQL Injection source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...
Grandora Rialto 1.6 - 'listfull.asp?ID' SQL Injection
source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...
Grandora Rialto 1.6 - 'searchmain.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...
Grandora Rialto 1.6 - forminfo.asp?refno Cross-Site Scripting
Grandora Rialto 1.6 - forminfo.asp?refno Cross-Site Scripting source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplie...
Grandora Rialto 1.6 - searchkey.asp Multiple SQL Injections
Grandora Rialto 1.6 - searchkey.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied...
Grandora Rialto 1.6 - 'searchkey.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...
Grandora Rialto 1.6 - 'searchoption.asp' Multiple SQL Injections
source: https://www.securityfocus.com/bid/21191/info Grandora Rialto is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal...
CVE-2006-5320
Directory traversal vulnerability in getimg.php in Album Photo Sans Nom 1.6 allows remote attackers to read arbitrary files via the img parameter...
CVE-2006-5320
Summary: Affected software: Album Photo Sans Nom 1.6. Vulnerable component: getimg.php. Root cause: directory traversal via the img parameter, enabling remote attackers to read arbitrary files. Impact: confidentiality risk (read access). No remediation details are provided in the supplied documen...
Genepi <= 1.6 (genepi.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ Genepi = 1.6 genepi.php Remote File Include Vulnerability ============================================================...
Genepi 1.6 - 'genepi.php' Remote File Inclusion
--------------------------------------------------------------------------- Genepi = 1.6 topdir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team : hTTp://RST-CREW.net : Remote : Yes Critical...
Album Photo Sans Nom 1.6 - 'Getimg.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/20441/info Album Photo Sans Nom is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attack...
Album Photo Sans Nom 1.6 - Getimg.php Remote File Inclusion
Album Photo Sans Nom 1.6 - Getimg.php Remote File Inclusion source: https://www.securityfocus.com/bid/20441/info Album Photo Sans Nom is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...