6595 matches found
CVE-2006-3688
SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
carspace.txt
Carspace.com Homepage: http://www.carspace.com Affected files: Input boxes of registering Login boxes sending mail input boxes. Searching for photos. XSS vuln with cookie disclosure via ErrorMessage when registering: http://www.carspace.com/?register@@!ErrorMessage=. Screenshots:...
Dating biz@ dating script v1.0 - XSS
Custom dating biz@ dating script v1.0 Homepage: http://www.e-cbd.biz/phpdatingscript.html Affected files: Profiles userview.php photocreate.php --------------------------------- The edit profile form can be spoofed and a user can enter any data he wishes and it will update his profile. The "Choos...
CVE-2006-3064
SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...
CVE-2006-3064
SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...
CVE-2006-3064
The CVE-2006-3064 entry affects Coppermine Photo Gallery (CPG) 1.4.8; a SQL injection exists in the add_hit function within include/function.inc.php when Keep detailed hit statistics is enabled. Remote attackers can potentially execute arbitrary SQL commands by supplying crafted values in the Ref...
CVE-2006-3032
Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...
CVE-2006-3032
CVE-2006-3032 describes multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery, affecting versions 1.05 and earlier (and possibly 2.0 trial). The XSS can be triggered via the parameters (1) catname and (2) total in displaypic.asp, and (3) catname in displaythumbs.asp, all...
CVE-2006-3032
Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...
CVE-2006-2993
Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...
CVE-2006-2992
Cross-site scripting XSS vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keym parameter...
CVE-2006-2993
CVE-2006-2993 affects My Photo Scrapbook 1.0 and earlier. The vulnerability consists of multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the value of the key parameter in two pages: Displayview.asp and Details_Photo_bv.asp. The connected documents do ...
CVE-2006-2993
Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...
CVE-2006-2992
CVE-2006-2992 describes a cross-site scripting (XSS) vulnerability in the page display.asp of My Photo Scrapbook 1.0 and earlier, where an attacker can inject arbitrary web script or HTML via the key_m parameter. The affected software is My Photo Scrapbook 1.0 and earlier; the underlying cause is...
[KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack
ORIGINAL ADVISORY: http://myimei.com/security/2006-06-11/copperminephotogallery148-addhit-function-sqlinjection-attack.html HTTP://KAPDA.IR ——-Summary——- Software: CPG Coppermine Photo Gallery Software’s Web Site: http://coppermine.sourceforge.net/ Versions: 1.4.8.stable Class: Remote Status:...
CVE-2006-2976
Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...
CVE-2006-2976
Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...
CVE-2006-2976
CVE-2006-2976 affects Coppermine Photo Gallery, specifically the file usermgr.php, with the vulnerability present in releases prior to 1.4.7. The available documents describe an unspecified vulnerability with unknown impact and remote attack vectors, potentially tied to authorization/authenticati...
[SA20465] Coppermine Photo Gallery usermgr.php Unspecified Vulnerability
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...