60 matches found
CVE-2008-1464
Gallarific Free Edition 1.1 is affected by multiple SQL injection vulnerabilities. The issues allow remote attackers to execute arbitrary SQL commands via input fields in distinct endpoints: the query parameter to search.php; gusername and gpassword to login.php; and username/password to gadmin/i...
CVE-2008-1464
Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 query parameter to a search.php; 2 gusername and 3 gpassword parameters to b login.php; and the 4 username and 5 password parameters to c gadmin/index.php in a...
CVE-2008-1469
CVE-2008-1469 refers to Gallarific Free Edition 1.1, where the components in gadmin/ (photos.php, comments.php, gallery.php) do not require authentication. This enables remote attackers to edit objects via a direct request, with the description noting this is a different vector than CVE-2008-1327...
CVE-2008-1469
Gallarific Free Edition 1.1 does not require authentication for 1 photos.php, 2 comments.php, and 3 gallery.php in gadmin/, which allows remote attackers to edit objects via a direct request, different vectors than CVE-2008-1327. NOTE: the provenance of this information is unknown; the details ar...
CVE-2008-1469: Improper Authentication
Gallarific Free Edition 1.1 does not require authentication for 1 photos.php, 2 comments.php, and 3 gallery.php in gadmin/, which allows remote attackers to edit objects via a direct request, different vectors than CVE-2008-1327. NOTE: the provenance of this information is unknown; the details ar...
CVE-2008-1464: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the 1 query parameter to a search.php; 2 gusername and 3 gpassword parameters to b login.php; and the 4 username and 5 password parameters to c gadmin/index.php in a...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1327
Gallarific does not require authentication for 1 users.php and 2 index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1326
Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Information disclosure
Gallarific does not require authentication for 1 users.php and 2 index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1326
Gallarific is affected by a Cross-site Scripting (XSS) vulnerability in search.php, exploitable via the query parameter to inject arbitrary web script/HTML. This is the explicit vulnerability described across multiple sources (including OpenVAS and NVD entries). The connected documents do not pro...
CVE-2008-1326
Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1327
Gallarific does not require authentication for 1 users.php and 2 index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1327
Gallarific Free Edition 1.1 is affected by CVE-2008-1327. The vulnerability arises because Gallarific does not require authentication for (1) users.php and (2) index.php, enabling remote attackers to add and edit tasks via a direct request. The NVD entry provides a CVSS v2 base score of 7.5 (HIGH...
CVE-2008-1327: Improper Authentication
Gallarific does not require authentication for 1 users.php and 2 index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2008-1326: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Gallarific - search.php?query Cross-Site Scripting
Gallarific - search.php?query Cross-Site Scripting source: https://www.securityfocus.com/bid/28163/info Gallarific is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the...
Gallarific - Multiple Script Direct Request Authentication Bypass
source: https://www.securityfocus.com/bid/28163/info Gallarific is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the...
Gallarific - Multiple Script Direct Request Authentication Bypass
Gallarific - Multiple Script Direct Request Authentication Bypass source: https://www.securityfocus.com/bid/28163/info Gallarific is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities. An attacker may leverage these issues to execute arbitrary script...
Gallarific - 'search.php?query' Cross-Site Scripting
source: https://www.securityfocus.com/bid/28163/info Gallarific is prone to a cross-site scripting vulnerability and multiple authentication-bypass vulnerabilities. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the...