69 matches found
PT-2006-2662 · Eric Gerdes · Crafty Syntax Image Gallery
Name of the Vulnerable Software and Affected Versions: Eric Gerdes Crafty Syntax Image Gallery CSIG versions 3.1g and earlier Description: The issue allows remote authenticated users to upload and execute arbitrary PHP code. This can be achieved by sending a multipart/form-data POST request with ...
Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================= Crafty Syntax Image Gallery = 4.0 + creating user account + user: 98fe56123 password: 7652L4M3l39q email: emai...
Crafty Syntax Image Gallery <= 3.1g Remote Code Execution Exploit
No description provided by source. !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any later version. This...
Crafty Syntax Image Gallery 3.1g - Remote Code Execution
Crafty Syntax Image Gallery 3.1g - Remote Code Execution !/usr/bin/perl This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or at your option any...
CVE-2004-2355
Cross-site scripting XSS vulnerability in Crafty Syntax Live Help CSLH before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session...
CVE-2004-2355
Crafty Syntax Live Help (CSLH) prior to 2.7.4 is affected by a Cross-site scripting (XSS) vulnerability. The issue, described in CVE-2004-2355, allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session. Supported by NVD entry, the description ...
CVE-2004-2355: Undefined Security Weakness
Cross-site scripting XSS vulnerability in Crafty Syntax Live Help CSLH before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session...
CVE-2004-2355
Cross-site scripting XSS vulnerability in Crafty Syntax Live Help CSLH before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the name field of a livehelp or chat session...
Crafty Syntax Live Help 2.7.3 - Multiple HTML Injection Vulnerabilities
source: https://www.securityfocus.com/bid/10463/info CSLH is prone to multiple HTML injection vulnerabilities. These issues exist due to insufficient sanitization of user-supplied data. The problem presents itself in various modules of the application and can allow remote attackers to inject HTML...