8058 matches found
Shutter 0.1.1 Multiple Remote SQL Injection Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...
Cross site scripting
Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...
CVE-2009-1616
Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...
CVE-2009-1616
The CVE pertains to Coppermine Photo Gallery (CPG) prior to version 1.4.22, where the docs/showdoc.php script fails to sanitize the css parameter, enabling cross-site scripting. The underlying issue is improper input handling that allows injection of arbitrary script/HTML, with the impact describ...
CVE-2009-1616: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...
TinyWebGallery Detection
The TinyWebGallery, a free php based photo album / gallery is running at this host. OpenVAS Vulnerability Test $Id: TinyWebGallerydetect.nasl 5747 2017-03-28 12:18:28Z cfi $ TinyWebGallery Detection Authors Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free...
TinyWebGallery Detection
The TinyWebGallery, a free php based photo album / gallery is running at this host. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...
Coppermine Photo Gallery 1.4.21 XSS
Coppermine Photo Gallery 1.4.21 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 29, 2009 Package: Coppermine Photo Gallery cpg1.4.21 Product homepage: http://coppermine-gallery.net/ Versions Affected: v.1.4.21 older versions are also affected Advisory:...
Sql injection
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...
Sql injection
SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...
CVE-2008-6788
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...
CVE-2008-6789
SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...
Code injection
The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php...
CVE-2008-6788
CVE-2008-6788 concerns MindDezign Photo Gallery 2.2. The issue is a SQL injection via the id parameter in an info action to index.php, exploitable when magic_quotes_gpc is disabled. The underlying vulnerability arises from unsafeguarded input leading to arbitrary SQL execution by remote attackers...
CVE-2008-6789
CVE-2008-6789 : A SQL injection vulnerability affects MindDezign Photo Gallery 2.2. The vulnerability is triggered by the username parameter in the login action to the admin module in index.php, allowing remote attackers to execute arbitrary SQL commands. This is a different vector from CVE-2008-...
CVE-2008-6788
SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...
CVE-2008-6789
SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...
Coppermine Photo Gallery css参数跨站脚本漏洞
BUGTRAQ ID: 34782 Coppermine是用PHP编写的多用途集成Web图形库脚本。 Coppermine的docs/showdoc.php文件没有正确地验证用户所提供的css参数便返回给了用户,远程攻击者可以通过提交恶意请求执行跨站脚本攻击,导致在用户浏览器会话中执行任意HTML和脚本代码。 Coppermine Photo Gallery 1.4.x Coppermine ---------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Coppermine Photo Gallery 1.4.21 Cross-Site Scripting
Coppermine Photo Gallery 1.4.21 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 29, 2009 Package: Coppermine Photo Gallery cpg1.4.21 Product homepage: http://coppermine-gallery.net/ Versions Affected: v.1.4.21 older versions are also affected Advisory:...
CVE-2008-6790: Improper Input Validation
The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php...