webSPELL 4.01.02 - gallery.php Blind SQL Injection

webSPELL 4.01.02 - gallery.php Blind SQL Injection allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h...

webSPELL 4.01.02 - 'gallery.php' Blind SQL Injection

allowredirection1; $xpl-cookiejar1; function istrue$xpl,$host,$path,$prefix,$gid,$pid,$uid,$i,$h $xpl-get"http://".$host.$path."gallery.php?action=window&galleryID=".$gid."&picID=".$pid."%20AND%20MIDSELECT%20password%20FROM%20".$prefix."user%20WHERE%20userID=".$uid.",".$i.",1=CHAR".$h."";...

CVE-2006-6391: Undefined Security Weakness

Multiple directory traversal vulnerabilities in Open Solution Quick.Cart 2.0, when registerglobals is enabled and magicquotesgpc is disabled, allow remote attackers to include arbitrary files via a .. dot dot in the configdbtype parameter to 1 actionsadmin/other.php and 2 actionsclient/gallery.ph...

Quick.Cart <= 2.0 (actions_client/gallery.php) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...

CVE-2006-2796: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in gallery.php in Captivate 1.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter, which is reflected in an error message...

Sql injection

SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...

CVE-2006-2157: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...

CVE-2006-1560: Undefined Security Weakness

Multiple SQL injection vulnerabilities in SkinTech phpNewsManager 1.48 allow remote attackers to execute arbitrary SQL commands via unspecified parameters, possibly 1 id and 2 topicid, in a browse.php, b category.php, c gallery.php, d poll.php, and e possibly other unspecified scripts. NOTE:...

CVE-2005-4234

The CVE-2005-4234 entry describes a SQL injection vulnerability in EncapsGallery 1.0.0 and earlier , specifically in gallery.php via the id parameter. The underlying issue is improper handling of user-supplied input leading to arbitrary SQL execution by remote attackers. Documented sources confir...

CVE-2005-4234: Undefined Security Weakness

SQL injection vulnerability in gallery.php in EncapsGallery 1.0.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

EncapsGallery 1.0 - gallery.php SQL Injection

EncapsGallery 1.0 - gallery.php SQL Injection source: https://www.securityfocus.com/bid/15836/info EncapsGallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

CVE-2005-3978: Undefined Security Weakness

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter in a ViewCat.php and b gallery.php, and the 2 ItemNum...

NetClassifieds Standard 1.9Professional 1.5Premium 1.0 - gallery.php?CatID SQL Injection

NetClassifieds Standard 1.9Professional 1.5Premium 1.0 - gallery.php?CatID SQL Injection source: https://www.securityfocus.com/bid/15683/info NetClassifieds is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in...

CVE-2003-1204: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via 1 the link parameter in sectionswindow.php, the directory parameter in 2 gallery.php, 3 navigation.php, or 4 uploadimage.php, the path...