CVE-2008-6990

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

EUVD-2008-6947

Malware in sbrugna...

EUVD-2008-6949

Malware in sbrugna...

EUVD-2008-6948

Malware in sbrugna...

EUVD-2008-4150

Malware in sbrugna...

CVE-2008-6988

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

CVE-2008-6990

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6989

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

CVE-2008-6988

CVE-2008-6988 concerns Easy Photo Gallery (Ezphotogallery) 2.1 with multiple XSS vulnerabilities. The affected component is the web application’s dynamic pages, specifically gallery.php and show.php, where user-supplied parameters (galleryid on gallery.php; size or imageid on show.php) can be man...

CVE-2008-6989

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6989

CVE-2008-6989 concerns Easy Photo Gallery (Ezphotogallery) 2.1, where gallery.php is vulnerable to SQL injection via the username parameter. The root cause is improper handling of the username input, allowing remote attackers to execute arbitrary SQL commands. Documented impact indicates the vuln...

CVE-2008-6990

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6988

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

CVE-2008-6990

The CVE-2008-6990 entry concerns Easy Photo Gallery (aka Ezphotogallery) 2.1, where a SQL injection flaw exists in gallery.php. The vulnerability allows remote attackers to inject and execute arbitrary SQL commands through the password parameter. This is based on multiple connected sources (NVD, ...

CVE-2008-6990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6988: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

CVE-2008-6989: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...