Lucene search
K

108 matches found

0day.today
0day.today
added 2010/05/02 12:0 a.m.18 views

MJB Data (gallery.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== MJB Data gallery.php Blind SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

7.1AI score
Exploits0
Prion
Prion
added 2009/08/20 5:30 p.m.11 views

Sql injection

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to productdesc.php, and the cid parameter to 2 showcategory.php and 3 gallery.php...

7.5CVSS9.3AI score0.01175EPSS
Exploits1References6Affected Software1
Prion
Prion
added 2009/08/19 5:24 a.m.12 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

4.3CVSS6.1AI score0.01862EPSS
Exploits0References7Affected Software1
Packet Storm
Packet Storm
added 2009/08/19 12:0 a.m.56 views

WAP-Motor 18.0 File Inclusion

=============================================================== Wap-motor Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail :...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2009/07/22 12:0 a.m.21 views

Ebay Clone 2009 SQL Injection

---------------------------------------------------------------------------------------------------- Name : Clone2009 Ebay Clone Site : http://clone2009.com/ Demo : http://clone2009.com/demo/ ---------------------------------------------------------------------------------------------------- Foun...

0.4AI score
Exploits0
Cvelist
Cvelist
added 2009/04/07 10:0 a.m.24 views

CVE-2008-6647

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter...

8.2AI score0.01012EPSS
Exploits1References5
Prion
Prion
added 2009/02/27 11:30 a.m.14 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Softbiz Classifieds Script allow remote attackers to inject arbitrary web script or HTML via the 1 radio parameter to showcategory.php, 2 msg parameter to advertisers/signinform.php, 3 radio parameter to gallery.php, 4 msg parameter to...

4.3CVSS5.9AI score0.01492EPSS
Exploits2References4
Prion
Prion
added 2009/02/13 6:30 p.m.21 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

4.3CVSS5.9AI score0.01065EPSS
Exploits0References5Affected Software1
Cvelist
Cvelist
added 2009/02/13 6:0 p.m.33 views

CVE-2008-6127

Multiple cross-site scripting XSS vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 query parameters to a index.php, 3 cat and 4 file parameters to b download.php, 5 gal parameter to gallery.php, and the 6 URL to...

5.6AI score0.01065EPSS
Exploits0References5
CVE
CVE
added 2009/02/13 6:0 p.m.48 views

CVE-2008-6127

CVE-2008-6127 affects moziloCMS

4.3CVSS5.8AI score0.01065EPSS
Exploits0References5Affected Software1
Packet Storm
Packet Storm
added 2008/11/20 12:0 a.m.12 views

phprsgal-sql.txt

--------------------------------------------------------------------------------------------------------------------------------------------------------------- phpRS 2.6.x and 2.8.X gallery.php SQL Injection Vulnerability http://www.supersvet.cz/download.php...

7.4AI score
Exploits0
NVD
NVD
added 2008/10/24 10:30 a.m.13 views

CVE-2008-4738

SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS8.4AI score0.0101EPSS
Exploits0References4
Prion
Prion
added 2008/10/24 10:30 a.m.6 views

Sql injection

SQL injection vulnerability in gallery.php in MyCard 1.0.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.0101EPSS
Exploits0References4Affected Software1
0day.today
0day.today
added 2008/09/27 12:0 a.m.14 views

MyCard 1.0.2 (gallery.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ MyCard 1.0.2 gallery.php id Remote SQL Injection Vulnerability ================================================================ . . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/...

7.1AI score
Exploits0
xssed
xssed
added 2008/08/22 12:0 a.m.18 views

Unfixed XSS vulnerability at www.cgart.ir

Security researcher SphinXKourosh.T, has submitted on 22/08/2008 a cross-site-scripting XSS vulnerability affecting www.cgart.ir, which at the time of submission ranked 1591219 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is...

6.6AI score
Exploits0References1
seebug.org
seebug.org
added 2008/05/11 12:0 a.m.34 views

Ktools PhotoStore 3.4.3 (gallery.php gid) SQL Injection Vulnerability

No description provided by source. Remote SQL Injection Vulnerability PhotoStore 3.4.3 gallery.php gid Script NAME : PhotoStore VERSION : 3.4.3 DOWNLOAD : http://www.ktools.net/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rk :: n/a ; ExPlo!t For ADMIN INFO : ===...

7.1AI score
Exploits0
CVE
CVE
added 2008/04/08 5:0 p.m.32 views

CVE-2008-1698

CVE-2008-1698 is an XSS vulnerability in Simple Gallery 2.2, exploitable via the album parameter to index.php in gallery.php. The occurrence is described as a remote script/HTML injection. The NVD entry lists a MEDIUM risk (CVSS v2 base score 4.3) with network access and no authentication require...

4.3CVSS5.6AI score0.01022EPSS
Exploits0References3Affected Software1
securityvulns
securityvulns
added 2008/01/20 12:0 a.m.40 views

Clever Copy <=3.0 Multiple Remote Vulnerabilities

...:::::Clever Copy v3.0 Multiple Remote Vulnerabilities::::.... sql injection/xss Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By : virangar security teamhadihadi --------------------------------- special tnx to:MR.nosrati,MR.hesy,satan,Zahra & my lovely friend ara...

0.5AI score
Exploits0
Prion
Prion
added 2008/01/18 10:0 p.m.11 views

Sql injection

Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to postcomment.php and the 2 album parameter to gallery.php...

7.5CVSS8.9AI score0.01096EPSS
Exploits0References5Affected Software1
Prion
Prion
added 2008/01/18 10:0 p.m.10 views

Cross site scripting

Cross-site scripting XSS vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter...

4.3CVSS6.1AI score0.01065EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder