CVE-2008-6647

CVE-2008-6647 (and related CVE-2008-6648) maps to SQL injection vulnerabilities in Ktools PhotoStore 3.4.3 (gallery.php via gid) and, for 6648, crumbs.php via gid to about_us.php, with potential arbitrary SQL execution. Connected sources confirm affected files and parameters; no remediation detai...

CVE-2008-6649

CVE-2008-6649 : SQL injection in Ktools PhotoStore component manager/image_details_editor.php affects versions 2.5, 2.9.8, 3.1.0, and up to 3.5.2. The vulnerability allows remote attackers to execute arbitrary SQL commands via the id parameter. Public references (e.g., Exploit-DB, Secunia, OSVDB,...

CVE-2008-6649

SQL injection vulnerability in manager/imagedetailseditor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6648

SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to aboutus.php. NOTE: this might be the same issue as CVE-2008-6647...

CVE-2008-6649: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in manager/imagedetailseditor.php in Ktools PhotoStore 2.5, 2.9.8, 3.1.0, and other versions through 3.5.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-6648: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in crumbs.php in Ktools PhotoStore 3.4.3 and 3.5.2 allows remote attackers to execute arbitrary SQL commands via the gid parameter to aboutus.php. NOTE: this might be the same issue as CVE-2008-6647...

CVE-2008-6647: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gallery.php in Ktools PhotoStore 3.4.3 allows remote attackers to execute arbitrary SQL commands via the gid parameter...

Ktools PhotoStore 3.4.3 (gallery.php gid) SQL Injection Vulnerability

No description provided by source. Remote SQL Injection Vulnerability PhotoStore 3.4.3 gallery.php gid Script NAME : PhotoStore VERSION : 3.4.3 DOWNLOAD : http://www.ktools.net/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rk :: n/a ; ExPlo!t For ADMIN INFO : ===...

Ktools Photostore 3.5.2 - Multiple SQL Injections

'/ -.- -------------------------oOO------OOo------------------------- | Ktools Photostore = v3.5.2 crumbs.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX | ----------------------------------------------------------------- ! Discovered.: DNX ! Vendor.....:...

Ktools Photostore 3.5.2 - Multiple SQL Injections

Ktools Photostore 3.5.2 - Multiple SQL Injections '/ -.- -------------------------oOO------OOo------------------------- | Ktools Photostore = v3.5.2 crumbs.php Remote SQL Injection | | works only with magic quotes = off | | coded by DNX |...

Ktools Photostore 3.5.1 - gid SQL Injection

Ktools Photostore 3.5.1 - gid SQL Injection Remote SQL Injection Vulnerability PhotoStore 3.4.3 gallery.php gid Script NAME : PhotoStore VERSION : 3.4.3 DOWNLOAD : http://www.ktools.net/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rk :: n/a ; ExPlo!t For ADMIN INFO : ===...

Ktools Photostore 3.5.1 - 'gid' SQL Injection

Remote SQL Injection Vulnerability PhotoStore 3.4.3 gallery.php gid Script NAME : PhotoStore VERSION : 3.4.3 DOWNLOAD : http://www.ktools.net/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] D0rk :: n/a ; ExPlo!t For ADMIN INFO : ===...

Ktools PhotoStore <= 3.5.1 (gallery.php gid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Ktools PhotoStore...