Coppermine Photo Gallery bridge/coppermine.inc.php文件SQL注入漏洞

BUGTRAQ ID: 28767 Coppermine是用PHP编写的多用途集成Web图形库脚本。 Coppermine的coppermine.inc.php文件没有正确地过滤SQL查询中的某些输入，这允许远程攻击者通过操控SQL查询请求执行SQL注入攻击。 Coppermine Photo Gallery 1.4.17 Coppermine ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://downloads.sourceforge.net/coppermine/cpg1.4.18.zip...

Coppermine Photo Gallery upload.php文件SQL注入漏洞

BUGTRAQ ID: 28766 Coppermine是用PHP编写的多用途集成web图形库脚本。 Coppermine的upload.php文件处理用户请求数据时存在输入验证漏洞，远程攻击者可能利用此漏洞执行SQL注入攻击。 在执行URI/URL上传时Coppermine的upload.php文件没有正确地过滤远程HTTP服务器的MIME媒体类型输入，这允许远程攻击者通过操控SQL查询请求执行SQL注入攻击。 Coppermine Photo Gallery 1.4.16 临时解决方法： 在upload.php文件中找到以下行： else // We will try to get...

Coppermine Photo Gallery bridge/coppermine.inc.php Bridge Wizard Session Cookie SQL Injection

The version of Coppermine installed on the remote host fails to sanitize user-supplied input to the bridge wizard session cookie before using it in a database query in 'bridge/coppermine.inc.php'. Regardless of PHP's 'magicquotesgpc' setting, an attacker may be able to exploit this issue to...

Free Photo Gallery Site Script (path) File Disclosure Vulnerability

No description provided by source. ------------------------------------------------------------------------- -- JIKI Team JIKO + KIl1er --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-back.org Script :...

Information disclosure

Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-1711

Terong PHP Photo Gallery aka Advanced Web Photo Gallery 1.0 stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information...

CVE-2008-1711

CVE-2008-1711 affects Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0, where passwords are stored in cleartext in a MySQL database. The underlying issue is insecure, unencrypted password storage, which enables threat actors with access to the database to directly obtain sensitive cr...

Free Photo Gallery Site Script - 'path' File Disclosure

------------------------------------------------------------------------- -- JIKI Team JIKO + KIl1er --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-back.org Script : gallery-script-lite Bug : Remote Local File...

Free Photo Gallery Site Script - path File Disclosure

Free Photo Gallery Site Script - path File Disclosure ------------------------------------------------------------------------- -- JIKI Team JIKO + KIl1er --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-back.org...

Free Photo Gallery Site Script (path) File Disclosure Vulnerability

Exploit for unknown platform in category web applications =================================================================== Free Photo Gallery Site Script path File Disclosure Vulnerability ===================================================================...

PHP Photo Gallery 1.0 (photo_id) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ PHP Photo Gallery 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By:...

PHP Photo Gallery 1.0 - 'photo_id' SQL Injection

--==+================================================================================+==-- --==+ PHP Photo Gallery 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On: 4 Apri...

PHP Photo Gallery 1.0 (photo_id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP Photo Gallery 1.0 photoid SQL Injection Vulnerability ============================================================...

PHP Photo Gallery 1.0 - photo_id SQL Injection

PHP Photo Gallery 1.0 - photoid SQL Injection --==+================================================================================+==-- --==+ PHP Photo Gallery 1.0 SQL Injection Vulnerbilitys +==-- --==+================================================================================+==--...

Sql injection

SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1551

SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1551

SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-1551

CVE-2008-1551 affects the Photo 3.02 module for RunCMS (viewcat.php) with an SQL injection via the cid parameter, enabling remote execution of arbitrary SQL commands. The NVD entry rates it High (CVSS v2.0 7.5) with network access and no authentication. References include X‑Force, Secunia, Exploi...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1536

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...