Lucene search
+L

108 matches found

zdt
zdt
added 2007/01/21 12:00 a.m.48 views

webSPELL 4.01.02 (gallery.php) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= webSPELL 4.01.02 gallery.php Remote Blind SQL Injection Exploit ================================================================= allowredirection1; $xpl-cookiejar1; functio...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2007/01/21 12:00 a.m.39 views

webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection

allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...

7.5CVSS5.8AI score0.01061EPSS
SaveExploits1
exploitpack
exploitpack
added 2007/01/21 12:00 a.m.26 views

webSPELL 4.01.02 - gallery.php Blind SQL Injection

webSPELL 4.01.02 - gallery.php Blind SQL Injection allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h...

SaveExploits0
seebug.org
seebug.org
added 2006/11/14 12:00 a.m.23 views

Quick.Cart <= 2.0 (actions_client/gallery.php) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

7.1AI score
SaveExploits0
Prion
Prion
added 2006/05/03 10:02 a.m.17 views

Sql injection

SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...

7.5CVSS8.7AI score0.01136EPSS
SaveExploits2References2Affected Software1
CVE
CVE
added 2005/12/14 11:00 a.m.42 views

CVE-2005-4234

The CVE-2005-4234 entry describes a SQL injection vulnerability in EncapsGallery 1.0.0 and earlier , specifically in gallery.php via the id parameter. The underlying issue is improper handling of user-supplied input leading to arbitrary SQL execution by remote attackers. Documented sources confir...

7.5CVSS8.8AI score0.01162EPSS
SaveExploits2References5Affected Software1
exploitpack
exploitpack
added 2005/12/13 12:00 a.m.18 views

EncapsGallery 1.0 - gallery.php SQL Injection

EncapsGallery 1.0 - gallery.php SQL Injection source: https://www.securityfocus.com/bid/15836/info EncapsGallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

0.3AI score
SaveExploits0
exploitpack
exploitpack
added 2005/12/02 12:00 a.m.11 views

NetClassifieds Standard 1.9Professional 1.5Premium 1.0 - gallery.php?CatID SQL Injection

NetClassifieds Standard 1.9Professional 1.5Premium 1.0 - gallery.php?CatID SQL Injection source: https://www.securityfocus.com/bid/15683/info NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in...

0.6AI score
SaveExploits0
Rows per page
Query Builder