6756 matches found
CVE-2007-0786
SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2007-0786
CVE-2007-0786 affects Noname Media Photo Galerie Standard
Coppermine Photo Gallery 1.4.10 - Multiple Local/Remote File Inclusions
source: https://www.securityfocus.com/bid/22409/info Coppermine Photo Gallery is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to execute arbitrary PHP code in the context of the...
Photo Galerie Standard <= 1.1 (view.php) SQL Injection Vulnerability
No description provided by source. Title : Photo Galerie Standard = 1.1 view.php Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://noname-media.com $$ : Free SQL--------------------------------------------------------- http://target/path//view.php?id=SQL Example:...
Photo Galerie Standard 1.1 - 'view.php' SQL Injection
Title : Photo Galerie Standard = 1.1 view.php Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://noname-media.com $$ : Free SQL--------------------------------------------------------- http://target/path//view.php?id=SQL Example: etc/passwd Read...
Photo Galerie Standard 1.1 - view.php SQL Injection
Photo Galerie Standard 1.1 - view.php SQL Injection Title : Photo Galerie Standard = 1.1 view.php Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://noname-media.com $$ : Free SQL--------------------------------------------------------- http://target/path//view.php?id=S...
Photo Galerie Standard <= 1.1 (view.php) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ==================================================================== Photo Galerie Standard = 1.1 view.php SQL Injection Vulnerability ==================================================================== Title : Photo Galerie Standard = 1....
Photo Galerie Standard <= 1.1 (view.php) Remote SQL Injection Vulnerability
Title : Photo Galerie Standard = 1.1 view.php Remote SQL Injection Vulnerability Author : ajann Contact : : S.Page : http://noname-media.com $$ : Free SQL--------------------------------------------------------- http://target/path//view.php?id=SQL Example: etc/passwd Read...
CVE-2006-6936
Cross-site scripting XSS vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via 1 the catname parameter to displaypic.asp or 2 the search field. NOTE: vector 1 likely overlaps CVE-2006-3032...
CVE-2006-6937
SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter...
CVE-2006-6937
CVE-2006-6937 describes an SQL injection in displaypic.asp of Xtreme ASP Photo Gallery, exploitable via the sortorder parameter. The vulnerability arises in the web application component/display logic, allowing remote attackers to inject arbitrary SQL commands. NVD lists a base score of 7.5 (HIGH...
CVE-2006-6936
The CVE-2006-6936 entry describes a cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery. The vulnerability is triggered by user-supplied input in two vectors: (1) the catname parameter to displaypic.asp and (2) the search field, enabling remote attackers to inject arbitrary HTML/...
CVE-2006-6936
Cross-site scripting XSS vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via 1 the catname parameter to displaypic.asp or 2 the search field. NOTE: vector 1 likely overlaps CVE-2006-3032...
CVE-2006-6937
SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the sortorder parameter...
Axiom Photo Gallery Template.PHP远程文件包含漏洞
Axiom Photo Gallery是一款基于PHP的WEB应用程序。 Axiom Photo Gallery不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'Template.PHP'脚本对用户提交的'sphppath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Axiom Axiom Photo Gallery 8.6 目前没有解决方案提供： http://superb-west.dl.sourceforge.net/sourceforge/axiompng/...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter to 1 adminpassword.php, 2 addwelcometext.php, 3 adminemail.php, 4 addtemplates.php, 5 adminpaypalemail.php, 6...
CVE-2007-0200
CVE-2007-0200 affects Geoffrey Golliher Axiom Photo/News Gallery (axiompng) 0.8.6. The issue is a PHP remote file inclusion in template.php exploited via the baseAxiomPath parameter, enabling remote attackers to execute arbitrary PHP code. This is the described vulnerability and its impact; no re...
CVE-2007-0200
PHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News Gallery axiompng 0.8.6 allows remote attackers to execute arbitrary PHP code via a URL in the baseAxiomPath parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...
CVE-2007-0181
PHP remote file inclusion vulnerability in include/commonfunction.php in magic photo storage website allows remote attackers to execute arbitrary PHP code via a URL in the configsitepath parameter...