CVE-2011-1063

Multiple cross-site scripting XSS vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 datatitle parameters in an edit action to files.php, or 3 id parameter in a view action to gallery.php...

CVE-2011-1063

Multiple cross-site scripting XSS vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 datatitle parameters in an edit action to files.php, or 3 id parameter in a view action to gallery.php...

PT-2011-2848

Name of the Vulnerable Software and Affected Versions Cherry-Design Photopad version 1.2.0 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the id or datatitle parameters in an edit action to "files.php", or the id parameter in a view...

CVE-2011-1063: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the 1 id or 2 datatitle parameters in an edit action to files.php, or 3 id parameter in a view action to gallery.php...

PT-2011-2418

Name of the Vulnerable Software and Affected Versions Gallarific PHP Photo Gallery script version 2.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the "gallery.php" file. Recommendations For Gallarific PHP Photo Gallery...

CVE-2011-0519: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to execute arbitrary SQL commands via the id parameter...

PT-2010-5482

Name of the Vulnerable Software and Affected Versions Brunetton LittlePhpGallery version 1.0.2 Description The issue allows remote attackers to list, include, and execute arbitrary local files. This is achieved by exploiting a directory traversal vulnerability in the gallery.php file when the mag...

CVE-2010-4406: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in gallery.php in Brunetton LittlePhpGallery 1.0.2, when magicquotesgpc is disabled, allows remote attackers to list, include, and execute arbitrary local files via a ..// dot dot slash slash in the repertoire parameter...

CVE-2010-2127: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in gallery.php in JV2 Folder Gallery 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the langfile parameter...

JV2 Folder Gallery 3.1 - gallery.php Remote File Inclusion

JV2 Folder Gallery 3.1 - gallery.php Remote File Inclusion ----------------------oOO------OOo----------------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Sn!pEr.S!Te // 2o1o |...

MJB Data (gallery.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== MJB Data gallery.php Blind SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0...

CVE-2009-3123: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in gallery/gallery.php in Wap-Motor before 18.1 allows remote attackers to read arbitrary files via a .. dot dot in the image parameter...

Sql injection

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to productdesc.php, and the cid parameter to 2 showcategory.php and 3 gallery.php...

CVE-2009-2894: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Ebay Clone 2009 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to productdesc.php, and the cid parameter to 2 showcategory.php and 3 gallery.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

WAP-Motor 18.0 File Inclusion

=============================================================== Wap-motor Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail :...

CVE-2008-6988: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

CVE-2008-6990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6989: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Ebay Clone 2009 SQL Injection

---------------------------------------------------------------------------------------------------- Name : Clone2009 Ebay Clone Site : http://clone2009.com/ Demo : http://clone2009.com/demo/ ---------------------------------------------------------------------------------------------------- Foun...