MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== MegaBBS Forum 2.2 SQL/XSS Multiple Remote Vulnerabilities =========================================================== AmnPardaz Security Research Team Title: MegaBBS Forum Multipl...

MegaBBS Forum 2.2 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Descriptio...

Megabbs Forum 2.2 - SQL Injection / Cross-Site Scripting

www.BugReport.ir AmnPardaz Security Research Team Title: MegaBBS Forum Multiple Vulnerabilities. Vendor: http://www.pd9soft.com/ Vulnerable Version: 2.2 Exploit: Available Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/37 1. Description: A complete, fully featured ASP...

Coppermine <=1.4.17 SQL-inj Session Hijack Exploit

Coppermine =1.4.17 SQL-inj Session Hijack Exploit 1 Дата: Пропатчена: April 11, 2008 http://forum.coppermine-gallery.net/index.php/topic,51882.0.html 2 Продукт: Coppermine Photo Gallery =1.4.17 3 Уязвимость: SQL-инъекция в $COOKIE$this-clientid в /bridge/coppermine.inc.php Значение извлекается из...

[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-10.fc8

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

Sql injection

SQL injection vulnerability in index.php in Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the photoid parameter...

CVE-2008-1875

SQL injection vulnerability in index.php in Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the photoid parameter...

CVE-2008-1875

Terong PHP Photo Gallery (Advanced Web Photo Gallery) 1.0 has an SQL injection in index.php via the photo_id parameter, enabling remote execution of arbitrary SQL commands. Affected component: index.php in Terong PHP Photo Gallery; root cause: unsafely constructed SQL query parameter. Impact: par...

CVE-2008-1875

SQL injection vulnerability in index.php in Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the photoid parameter...

Sql injection

SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery CPG 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the sessionid variable, as exploited in the wild in April...

CVE-2008-1840

SQL injection vulnerability in upload.php in Coppermine Photo Gallery CPG 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload...

Sql injection

SQL injection vulnerability in upload.php in Coppermine Photo Gallery CPG 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload...

CVE-2008-1841

SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery CPG 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the sessionid variable, as exploited in the wild in April...

CVE-2008-1840

CVE-2008-1840 affects Coppermine Photo Gallery (CPG) up to version 1.4.16. The vulnerability is an SQL injection in upload.php that can be exploited via the Content-Type HTTP header used during an upload. It can be exploited by remote authenticated users or user‑assisted remote HTTP servers to ex...

CVE-2008-1841

SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery CPG 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the sessionid variable, as exploited in the wild in April...

CVE-2008-1840

SQL injection vulnerability in upload.php in Coppermine Photo Gallery CPG 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload...

CVE-2008-1841

CVE-2008-1841 is a database-injection vulnerability in Coppermine Photo Gallery (CPG) 1.4.17 and earlier. It affects the session handling in bridge/coppermine.inc.php, allowing remote attackers to execute arbitrary SQL commands via a field tied to the session_id variable; exploitation was reporte...

VulnCheck KEV: CVE-2008-1840

SQL injection vulnerability in upload.php in Coppermine Photo Gallery CPG 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload...

VulnCheck KEV: CVE-2008-1841

SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery CPG 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the sessionid variable, as exploited in the wild in...

CVE-2008-1793

CVE-2008-1793 involves multiple cross-site scripting (XSS) vulnerabilities in the view.cgi module of Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold. The weaknesses allow remote attackers to inject arbitrary web script or HTML via the (1) AdNum and (2) Department para...