Coppermine Photo Gallery <= 1.4.22 Multiple Remote Vulnerabilities

No description provided by source. Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery = 1.4.22 Coppermine Foto Gallery suffers from different vulnerabilities. There is a Local File Inclusion and a Blind SQL Injection working with registerglobals = On and magicquotesgpc...

Coppermine Photo Gallery 1.4.22 LFI / SQL Injection

Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery = 1.4.22 Coppermine Foto Gallery suffers from different vulnerabilities. There is a Local File Inclusion and a Blind SQL Injection working with registerglobals = On and magicquotesgpc = Off and a SQL Injection working ...

coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities

Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery $value...

coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities

coppermine photo Gallery 1.4.22 - Multiple Vulnerabilities Author: girex Site: http://girex.altervista.org/ CMS: Coppermine Photo Gallery = 1.4.22 Coppermine Foto Gallery suffers from different vulnerabilities. There is a Local File Inclusion and a Blind SQL Injection working with registerglobals...

Shutter 0.1.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Cross site scripting

Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...

CVE-2009-1616

Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...

CVE-2009-1616

The CVE pertains to Coppermine Photo Gallery (CPG) prior to version 1.4.22, where the docs/showdoc.php script fails to sanitize the css parameter, enabling cross-site scripting. The underlying issue is improper input handling that allows injection of arbitrary script/HTML, with the impact describ...

TinyWebGallery Detection

The TinyWebGallery, a free php based photo album / gallery is running at this host. OpenVAS Vulnerability Test $Id: TinyWebGallerydetect.nasl 5747 2017-03-28 12:18:28Z cfi $ TinyWebGallery Detection Authors Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free...

TinyWebGallery Detection

The TinyWebGallery, a free php based photo album / gallery is running at this host. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Coppermine Photo Gallery 1.4.21 XSS

Coppermine Photo Gallery 1.4.21 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 29, 2009 Package: Coppermine Photo Gallery cpg1.4.21 Product homepage: http://coppermine-gallery.net/ Versions Affected: v.1.4.21 older versions are also affected Advisory:...

Code injection

The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php...

Sql injection

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

CVE-2008-6789

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

Sql injection

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

CVE-2008-6788

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

CVE-2008-6788

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

CVE-2008-6789

CVE-2008-6789 : A SQL injection vulnerability affects MindDezign Photo Gallery 2.2. The vulnerability is triggered by the username parameter in the login action to the admin module in index.php, allowing remote attackers to execute arbitrary SQL commands. This is a different vector from CVE-2008-...

CVE-2008-6788

CVE-2008-6788 concerns MindDezign Photo Gallery 2.2. The issue is a SQL injection via the id parameter in an info action to index.php, exploitable when magic_quotes_gpc is disabled. The underlying vulnerability arises from unsafeguarded input leading to arbitrary SQL execution by remote attackers...

CVE-2008-6789

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...