CVE-2007-5485

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter...

CVE-2007-5485

CVE-2007-5485 affects the mg2 1.0 module for KwsPHP. The vulnerability is a SQL injection in index.php via the album parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the connected documents; no specific exploit status or in-the-wild ...

CVE-2007-5485: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter...

KwsPHP 1.0 mg2 Module Remote SQL Injection Vulnerability

No description provided by source. -------------------- KwsPHP 1.0 mg2 Module Remote SQL Injection Exploit -------------------- Found : xoron -------------------- Exploit: Name: index.php?mod=mg2&album=-1//union//select//0,1,pseudo,3,4,5//from//users//where//id=1/ Pass:...

kwsphpmg2-sql.txt

-------------------- KwsPHP 1.0 mg2 Module Remote SQL Injection Exploit -------------------- Found : xoron -------------------- Exploit: Name: index.php?mod=mg2&album=-1//union//select//0,1,pseudo,3,4,5//from//users//where//id=1/ Pass:...

KwsPHP 1.0 mg2 Module Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== KwsPHP 1.0 mg2 Module Remote SQL Injection Vulnerability ======================================================== -------------------- KwsPHP 1.0 mg2 Module Remote SQL Injection...

KwsPHP 1.0 mg2 Module - SQL Injection

-------------------- KwsPHP 1.0 mg2 Module Remote SQL Injection Exploit -------------------- Found : xoron -------------------- Exploit: Name: index.php?mod=mg2&album=-1//union//select//0,1,pseudo,3,4,5//from//users//where//id=1/ Pass:...

The Apache with the latest security vulnerabilities and use-vulnerability and early warning-the black bar safety net

Sources of information: the Red wolf security group www.wolfexp.net,www.crst.com.cn） The Apache with the latest security vulnerabilities with the use of Bug Find By Cooldiyer @ 2006/12/13 1 5:0 5 Description: Any to. php at the beginning of the file name, Apache as the php file parsing Such as"...

CVE-2006-0493

Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...

Cross site scripting

Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...

CVE-2006-0493

The CVE-2006-0493 entry describes a Cross-site Scripting (XSS) vulnerability in MG2 (formerly Minigal) version 0.5.1. The issue allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment attached to a picture. The available sources confirm the affected software...

CVE-2006-0493

Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...

CVE-2006-0493: Undefined Security Weakness

Cross-site scripting XSS vulnerability in MG2 formerly known as Minigal 0.5.1 allows remote attackers to inject arbitrary web script or HTML via the Name field in a comment associated with a picture...

XSS flaw in MG2 Image Gallery (v.0.5.1)

Users can inject XSS into the form field "Name", when adding a comment on a picture. This will lead to the execution of XSS code. Simple scripting like scriptalert'hello'/script , and more advanced document.location, and document.cookie works. This has been tested on version 0.5.1. Other versions...

CVE-2005-3432

The CVE-2005-3432 issue affects MiniGal 2 (MG2) 0.5.1, where a remote attacker can cause listing of password-protected images by sending a request to index.php with list = * and page = all. The public sources describe the vulnerability as an information-disclosure flaw allowing access to protecte...

CVE-2005-3432: Undefined Security Weakness

MiniGal 2 MG2 0.5.1 allows remote attackers to list password protected images via a request to index.php with the list parameter set to wildcard and the page parameter set to all...

mg2-image.txt

The MG2 Image Gallery system has the ability to make create online galleries. Even password protected once. By manipulating url from a gallery, you are able to list out all pictures in every gallery. Even though they are inside a password protected folder. Sample manipulation could be:...

Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images

The MG2 Image Gallery system has the ability to make create online galleries. Even password protected once. By manipulating url from a gallery, you are able to list out all pictures in every gallery. Even though they are inside a password protected folder. Sample manipulation could be:...

MG2 0.5.1 - Authentication Bypass

MG2 0.5.1 - Authentication Bypass source: https://www.securityfocus.com/bid/15235/info MG2 is affected by an authentication bypass vulnerability. This issue can allow remote attackers to gain access to password protected image galleries. All versions of MG2 are considered to be vulnerable at the...

MG2 0.5.1 - Authentication Bypass

source: https://www.securityfocus.com/bid/15235/info MG2 is affected by an authentication bypass vulnerability. This issue can allow remote attackers to gain access to password protected image galleries. All versions of MG2 are considered to be vulnerable at the moment. Minigal B13 is likely...