CVE-2006-2214

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in 1 top.php and 2 member.php. NOTE: this issue has also been reported to affect 1.7.2...

CVE-2006-2214

CVE-2006-2214 affects 4images versions 1.7.1 and earlier, where the sessionid parameter in top.php and member.php allows remote attackers to execute arbitrary SQL commands. Root cause: likely improper input handling that enables SQL injection, with the issue also reported to affect 1.7.2. Impact:...

CVE-2006-2214

Multiple SQL injection vulnerabilities in 4images 1.7.1 and earlier allow remote attackers to execute arbitrary SQL commands via the sessionid parameter in 1 top.php and 2 member.php. NOTE: this issue has also been reported to affect 1.7.2...

4images171.txt

------------------------------= 1145405428 GROUP BY catid Table 'zakigallery.4imagesimages' doesn't exist ------------- DB Error: Bad SQL Query: SELECT catid, COUNT AS numimages FROM 4imagesimages WHERE imageactive = 1 GROUP BY catid Table 'zakigallery.4imagesimages' doesn't exist ------------- D...

4images<-- 1.7.1 SQL Injection

--------------- foud by CrAzY CrAcKeR Site:http://www.alshmokh.com --------------- Bug is found in this script 4images 1.7.1 DB Error: Bad SQL Query: SELECT catid, catname, catdescription, catparentid, cathits, catorder, authviewcat, authviewimage, authdownload, authupload, authdirectupload,...

4Images 1.7.1 - member.php?sessionid SQL Injection

4Images 1.7.1 - member.php?sessionid SQL Injection source: https://www.securityfocus.com/bid/17748/info 4Images is prone to multiple, unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

4Images 1.7.1 - 'top.php?sessionid' SQL Injection

source: https://www.securityfocus.com/bid/17748/info 4Images is prone to multiple, unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

4Images 1.7.1 - top.php?sessionid SQL Injection

4Images 1.7.1 - top.php?sessionid SQL Injection source: https://www.securityfocus.com/bid/17748/info 4Images is prone to multiple, unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

4Images 1.7.1 - 'member.php?sessionid' SQL Injection

source: https://www.securityfocus.com/bid/17748/info 4Images is prone to multiple, unspecified SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...

Cross site scripting

Cross-site scripting XSS vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the username parameter in register.php...

CVE-2006-2011

Cross-site scripting XSS vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the username parameter in register.php...

CVE-2006-2011

The CVE-2006-2011 issue affects 4images 1.7 and earlier, where a Cross-site scripting (XSS) flaw exists in member.php. The vulnerability is triggered via the nickname in register.php, likely involving the user_name parameter, allowing remote attackers to inject arbitrary web script or HTML. The N...

CVE-2006-2011

Cross-site scripting XSS vulnerability in member.php in 4images 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the nickname, probably involving the username parameter in register.php...

4images <= 1.7 XSS

==================== Discovered by: Qex Date: 14 April 2006 ==================== Steps:- 1- Register with this nickname:- 'scriptalertdocument.cookie/script 2- Go to http://www.SITE.com/PATH/member.php?action=showprofile&userid=ID...

4homepages 4Images 1.7 - member.php Cross-Site Scripting

4homepages 4Images 1.7 - member.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17625/info 4images is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue t...

4homepages 4Images 1.7 - 'member.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17625/info 4images is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of a...

4Images <= 1.7.1 Directory Traversal Vulnerability

The remote web server is running 4Images which is prone to directory traversal attacks. SPDX-FileCopyrightText: 2006 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4Images <= 1.7.1 index.php template Parameter Traversal Local File Inclusion

4Images is installed on the remote system. It is an image gallery management system. The installed application does not validate user-input passed in the 'template' variable of the 'index.php' file. This allows an attacker to execute directory traversal attacks and display the content of sensitiv...

4images.txt

----------------- 4images templateextension $template = ""; else $maintemplate = $template; else $template = ""; includeROOTPATH.'includes/pageheader.php'; if !empty$template $clickstream = "urlROOTPATH."index.php".""".$lang'home'."".$config'categoryseparator'.strreplace"", " ", ucfirst$template;...

4images &lt;=1.7.1 remote code execution

----------------- 4images =1.7.1 remote code execution ------------------------ software: site: http://www.4homepages.de/ -------------------------------------------------------------------------------- i vulnerable code in index.php at line 35-54: ... if isset$HTTPGETVARS'template' ||...