Lucene search
K

108 matches found

exploitpack
exploitpack
added 2007/01/21 12:0 a.m.24 views

webSPELL 4.01.02 - gallery.php Blind SQL Injection

webSPELL 4.01.02 - gallery.php Blind SQL Injection allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h...

Exploits0
0day.today
0day.today
added 2007/01/21 12:0 a.m.42 views

webSPELL 4.01.02 (gallery.php) Remote Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================================= webSPELL 4.01.02 gallery.php Remote Blind SQL Injection Exploit ================================================================= allowredirection1; $xpl-cookiejar1; functio...

7.1AI score
Exploits0
Exploit DB
Exploit DB
added 2007/01/21 12:0 a.m.34 views

webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection

allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...

7.4AI score
Exploits0
seebug.org
seebug.org
added 2006/11/14 12:0 a.m.18 views

Quick.Cart <= 2.0 (actions_client/gallery.php) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

7.1AI score
Exploits0
Prion
Prion
added 2006/05/03 10:2 a.m.11 views

Sql injection

SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...

7.5CVSS8.7AI score0.01136EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2005/12/14 11:0 a.m.37 views

CVE-2005-4234

The CVE-2005-4234 entry describes a SQL injection vulnerability in EncapsGallery 1.0.0 and earlier , specifically in gallery.php via the id parameter. The underlying issue is improper handling of user-supplied input leading to arbitrary SQL execution by remote attackers. Documented sources confir...

7.5CVSS8.8AI score0.01162EPSS
Exploits1References5Affected Software1
exploitpack
exploitpack
added 2005/12/13 12:0 a.m.13 views

EncapsGallery 1.0 - gallery.php SQL Injection

EncapsGallery 1.0 - gallery.php SQL Injection source: https://www.securityfocus.com/bid/15836/info EncapsGallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

0.3AI score
Exploits0
exploitpack
exploitpack
added 2005/12/02 12:0 a.m.10 views

NetClassifieds Standard 1.9Professional 1.5Premium 1.0 - gallery.php?CatID SQL Injection

NetClassifieds Standard 1.9Professional 1.5Premium 1.0 - gallery.php?CatID SQL Injection source: https://www.securityfocus.com/bid/15683/info NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in...

0.6AI score
Exploits0
Rows per page
Query Builder