CVE-2008-1536

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1536

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-9.fc8

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

RunCMS Module Photo 3.02 (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= RunCMS Module Photo 3.02 cid Remote SQL Injection Vulnerability ================================================================= RunCMS Module Photo 3.02 SQL injection DORK...

RunCMS Module Photo 3.02 - 'cid' SQL Injection

RunCMS Module Photo 3.02 SQL injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAÄ°L : [email protected] DORK 1 : allinurl: "modules/photo/viewcat.php?id" DORK 2 : inurl:photo "powered by runcms" EXPLOIT : admin...

RunCMS Module Photo 3.02 - cid SQL Injection

RunCMS Module Photo 3.02 - cid SQL Injection RunCMS Module Photo 3.02 SQL injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAÄ°L : [email protected] DORK 1 : allinurl: "modules/photo/viewcat.php?id" DORK 2 :...

Sql injection

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

Directory traversal

Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot forward slash in the GET command...

CVE-2008-1162

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

CVE-2008-1169

The connected documents confirm a directory traversal vulnerability in the embedded HTTP server of SCI Photo Chat Server 3.4.9 and earlier. The flaw allows remote attackers to read arbitrary files by supplying ".." or "../" in the GET command. Affected component: embedded HTTP server within SCI P...

CVE-2008-1162

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

Dynamic photo gallery 1.02 (albumID) Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link:...

Dynamic photo gallery V1.02 SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...

dynamic-sql.txt

Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...

Dynamic photo gallery 1.02 (albumID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Dynamic photo gallery 1.02 albumID Remote SQL Injection Vulnerability ======================================================================= Aria-Security Team...

Dynamic photo Gallery 1.02 - 'albumID' SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...

CVE-2008-0939

Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...

CVE-2008-0939

The WP Photo Album (WPPA) WordPress plugin (before 1.1) contains multiple SQL injection flaws in wppa.php. The issues arise from unsafely handling the photo parameter (wppa_photo_name) and the album parameter (wppa_album_name) in index.php, allowing remote attackers to execute arbitrary SQL comma...

CVE-2008-0939

Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...

WordPress WP Photo Album Plugin <= 1.0 - Multiple SQL Injection

Because of these vulnerabilities in wppa.php, the attackers can execute arbitrary SQL commands. Solution Update thne plugin...