Coppermine Photo Gallery 1.4.10 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================ Coppermine Photo Gallery 1.4.10 Remote SQL Injection Exploit ============================================================ toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $...

Coppermine Photo Gallery 1.4.10 - 'cpg1410_xek.php' SQL Injection

toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i GLOBALS'host', 80, $errno, $errstr, 30; if!$fp die"- Can't connec...

Coppermine Photo Gallery 1.4.10 - cpg1410_xek.php SQL Injection

Coppermine Photo Gallery 1.4.10 - cpg1410xek.php SQL Injection toHex$sql . ', ' . $this-toHex'bazik' . ' LIMIT 1,1/'; $b1 = 'bazik'; $a2 = $sql; $b2 = 'bazik'; $arr = array$a1 = $b1, $a2 = $b2; return $this-GLOBALS'prefix' . 'albpw=' . rawurlencodeserialize$arr; function toHex$str for $i=0; $i...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin.php or 2 index.php in photo/...

CVE-2008-0359

Multiple cross-site scripting XSS vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 admin.php or 2 index.php in photo/...

Debian Security Advisory DSA 1404-1 (gallery2)

The remote host is missing an update to gallery2 announced via advisory DSA 1404-1. OpenVAS Vulnerability Test $Id: deb14041.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1404-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 138-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 138-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-512)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 138-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 138-1. OpenVAS Vulnerability Test $Id: deb1381.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 138-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 512-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 512-1. OpenVAS Vulnerability Test $Id: deb5121.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 512-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

Debian Security Advisory DSA 355-1 (gallery)

The remote host is missing an update to gallery announced via advisory DSA 355-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0292

Cross-site scripting XSS vulnerability in photoalbum.pl in Dansie Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0292

Cross-site scripting XSS vulnerability in photoalbum.pl in Dansie Photo Album 1.0 allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-0292

CVE-2008-0292 is an XSS vulnerability in Dansie Photo Album 1.0, specifically in photo_album.pl, where attacker-supplied input in the search parameter can inject arbitrary web script or HTML. The connected sources confirm the affected component is Dansie Photo Album 1.0 and the vulnerability type...

Sql injection

Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a Imgbig.asp, b thumb.asp, and c thumbricerca.asp and the 2 ricerca parameter to d thumbricerca.asp...

CVE-2008-0256

Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a Imgbig.asp, b thumb.asp, and c thumbricerca.asp and the 2 ricerca parameter to d thumbricerca.asp...

CVE-2008-0256

CVE-2008-0256 describes multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) Imgbig.asp, (b) thumb.asp, and (c) thumbricerca.asp, and the (2) ricerca parameter to (d) thumbr...

CVE-2008-0256

Multiple SQL injection vulnerabilities in Matteo Binda ASP Photo Gallery 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to a Imgbig.asp, b thumb.asp, and c thumbricerca.asp and the 2 ricerca parameter to d thumbricerca.asp...

ASP Photo Gallery 1.0 Multiple SQL Injection Vulnerabilities

No description provided by source. ASP Photo Gallery 1.0 - Multiple SQL Injection Vulnerabilities Date : 12-january-2008 Risk : Medium Vendor URL : http://www.matteobinda.com/apg.php Google Dork : "download this free gallery at matteobinda.com" : allinurl: imgbig.asp?id= Found By : Ruben Ventura...

ASP Photo Gallery 1.0 Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ ASP Photo Gallery 1.0 Multiple SQL Injection Vulnerabilities ============================================================ ASP Photo Gallery 1.0 - Multiple SQL Injection...