6759 matches found
coppermine122.txt
---------------------------------------------------- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...
Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities
---------------------------------------------------- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...
CVE-2006-3688
SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3688
SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2006-3688
CVE-2006-3688 describes an SQL injection in Room.php of Francisco Charrua Photo-Gallery 1.0, exploitable via the id parameter to execute arbitrary SQL commands. The provided documents do not specify affected product versions beyond 1.0, nor any remediation or mitigations. No exploitation details ...
carspace.txt
Carspace.com Homepage: http://www.carspace.com Affected files: Input boxes of registering Login boxes sending mail input boxes. Searching for photos. XSS vuln with cookie disclosure via ErrorMessage when registering: http://www.carspace.com/?register@@!ErrorMessage=. Screenshots:...
Dating biz@ dating script v1.0 - XSS
Custom dating biz@ dating script v1.0 Homepage: http://www.e-cbd.biz/phpdatingscript.html Affected files: Profiles userview.php photocreate.php --------------------------------- The edit profile form can be spoofed and a user can enter any data he wishes and it will update his profile. The "Choos...
CVE-2006-3064
SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...
CVE-2006-3064
The CVE-2006-3064 entry affects Coppermine Photo Gallery (CPG) 1.4.8; a SQL injection exists in the add_hit function within include/function.inc.php when Keep detailed hit statistics is enabled. Remote attackers can potentially execute arbitrary SQL commands by supplying crafted values in the Ref...
CVE-2006-3064
SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...
CVE-2006-3032
Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...
CVE-2006-3032
Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...
CVE-2006-3032
CVE-2006-3032 describes multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery, affecting versions 1.05 and earlier (and possibly 2.0 trial). The XSS can be triggered via the parameters (1) catname and (2) total in displaypic.asp, and (3) catname in displaythumbs.asp, all...
CVE-2006-2992
Cross-site scripting XSS vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keym parameter...
CVE-2006-2993
Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...
CVE-2006-2992
CVE-2006-2992 describes a cross-site scripting (XSS) vulnerability in the page display.asp of My Photo Scrapbook 1.0 and earlier, where an attacker can inject arbitrary web script or HTML via the key_m parameter. The affected software is My Photo Scrapbook 1.0 and earlier; the underlying cause is...
CVE-2006-2993
CVE-2006-2993 affects My Photo Scrapbook 1.0 and earlier. The vulnerability consists of multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the value of the key parameter in two pages: Displayview.asp and Details_Photo_bv.asp. The connected documents do ...
CVE-2006-2993
Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...
[KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack
ORIGINAL ADVISORY: http://myimei.com/security/2006-06-11/copperminephotogallery148-addhit-function-sqlinjection-attack.html HTTP://KAPDA.IR ——-Summary——- Software: CPG Coppermine Photo Gallery Software’s Web Site: http://coppermine.sourceforge.net/ Versions: 1.4.8.stable Class: Remote Status:...