CVE-2006-6517: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in KDPics 1.16 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 categories parameter to a index.php3 or b galeries.inc.php3...

CVE-2006-6516: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in KDPics 1.16 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 page parameter to a index.php3, or the 2 libpath parameter to b authenticate.inc.php3 or c lib/exifer/exif.php...

kdpics116.txt

KDPics 1.16 and prior -------------------- Vendor site: http://www.kdland.org/kdpics/ Product: KDPics = 1.16 Vulnerability: Remote File Inclusion Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 30.11.06 Public disclosure: 09.12.06 Description: ------------ Remote File Inclusion...

KDPics Multiple Vulnerabities

KDPics 1.16 and prior -------------------- Vendor site: http://www.kdland.org/kdpics/ Product: KDPics = 1.16 Vulnerability: Remote File Inclusion Vulnerability & XSS Credits: MrKaLiMaN Reported to Vendor: 30.11.06 Public disclosure: 09.12.06 Description: ------------ Remote File Inclusion...

KDPics 1.11/1.16 - 'index.php3?categories' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit may allow unauthorized users to vie...

KDPics 1.111.16 - index.php3?categories Cross-Site Scripting

KDPics 1.111.16 - index.php3?categories Cross-Site Scripting source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied...

KDPics 1.111.16 - galeries.inc.php3?categories Cross-Site Scripting

KDPics 1.111.16 - galeries.inc.php3?categories Cross-Site Scripting source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize...

KDPics 1.11/1.16 - 'galeries.inc.php3?categories' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21515/info KDPics is prone to multiple input-validation vulnerabilities, including cross-site scripting and remote file-include issues, because the application fails to sanitize user-supplied input. A successful exploit may allow unauthorized users to vie...