CVE-2005-1947

Cross-site request forgery CSRF vulnerability in Invision Gallery before 1.3.1 allows remote attackers to delete albums and images as another user via a link or IMG tag to the 1 albums or 2 delimg actions...

Invision Power Services Invision Gallery 1.0.11.3 - SQL Injection

Invision Power Services Invision Gallery 1.0.11.3 - SQL Injection source: https://www.securityfocus.com/bid/13907/info Invision Gallery is affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' scri...

PT-2005-2898 · Invision · Invision Gallery

Name of the Vulnerable Software and Affected Versions: Invision Gallery versions prior to 1.3.1 Description: A cross-site request forgery issue allows remote attackers to perform actions such as deleting albums and images as another user. This can be achieved via a link or IMG tag to specific...

Invision Power Services Invision Gallery 1.0.1/1.3 - SQL Injection

source: https://www.securityfocus.com/bid/13907/info Invision Gallery is affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'index.php' script before using it in an SQL query. Successful exploitation could...

CVE-2004-1835

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the 1 img, 2 cat, 3 sortkey, 4 orderkey, 5 user, or 6 album parameters...

CVE-2004-1835

CVE-2004-1835 affects Invision Gallery 1.0.1 and involves multiple SQL injection vulnerabilities in index.php. The affected parameters are img, cat, sort_key, order_key, user, and album, enabling remote attackers to modify SQL queries. This vulnerability is supported by sources such as PacketStor...

CVE-2004-1835

Multiple SQL injection vulnerabilities in index.php in Invision Gallery 1.0.1 allow remote attackers to execute arbitrary SQL via the 1 img, 2 cat, 3 sortkey, 4 orderkey, 5 user, or 6 album parameters...

Invision Gallery 1.0.1 SQL Injection

It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due to insufficient sanitization of user-supplied data via the 'img', 'cat', 'sortkey', 'orderkey', 'user' and 'album' parameters ...

Invision Gallery SQL Injection Vulnerabilities

Vendor : Invision Power Services URL : http://www.invisiongallery.com Version : Invision Gallery 1.0.1 Risk : SQL Injection Vulnerabilities Description: Invision Gallery is a fully featured, powerful gallery system that is easy and fun to use! It plugs right into your existing Invision Power Boar...

Invision Power Services Invision Gallery 1.0.1 - Multiple SQL Injections

Invision Power Services Invision Gallery 1.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/9944/info It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due t...

Invision Power Services Invision Gallery 1.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/9944/info It has been reported that Invision Gallery may be prone to multiple sql injection vulnerabilities, allowing an attacker to influence SQL query logic. The issues exist due to insufficient sanitization of user-supplied data via the 'img', 'cat',...

invision101PSsql.txt

Vendor : Invision Power Services URL : http://www.invisiongallery.com Version : Invision Gallery 1.0.1 Risk : SQL Injection Vulnerabilities Description: Invision Gallery is a fully featured, powerful gallery system that is easy and fun to use! It plugs right into your existing Invision Power Boar...

Invision Gallery < 1.0.1 - SQL Injection

Invision Power Top Site List SQL Injection Vendor: Invision Power Services Product: Invision Power Top Site List Version: = 1.1 RC 2 Website: http://www.invisiontsl.com/ BID: 9945 Description: Invision Power Top Site List is a flexible site ranking script written in PHP, the popular programming...