Lucene search
+L

8058 matches found

seebug.org
seebug.org
•added 2009/05/15 12:00 a.m.•2481 views

Shutter 0.1.1 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

7.1AI score
SaveExploits0
Prion
Prion
•added 2009/05/11 8:30 p.m.•31 views

Cross site scripting

Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...

4.3CVSS5.9AI score0.01655EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
•added 2009/05/11 8:00 p.m.•35 views

CVE-2009-1616

Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...

5.4AI score0.01655EPSS
SaveExploits2References5
CVE
CVE
•added 2009/05/11 8:00 p.m.•70 views

CVE-2009-1616

The CVE pertains to Coppermine Photo Gallery (CPG) prior to version 1.4.22, where the docs/showdoc.php script fails to sanitize the css parameter, enabling cross-site scripting. The underlying issue is improper input handling that allows injection of arbitrary script/HTML, with the impact describ...

4.3CVSS5.6AI score0.01655EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/11 12:00 a.m.•4 views

CVE-2009-1616: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in docs/showdoc.php in Coppermine Photo Gallery CPG before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505...

4.3CVSS5.9AI score0.01655EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2009/05/10 12:00 a.m.•22 views

TinyWebGallery Detection

The TinyWebGallery, a free php based photo album / gallery is running at this host. OpenVAS Vulnerability Test $Id: TinyWebGallerydetect.nasl 5747 2017-03-28 12:18:28Z cfi $ TinyWebGallery Detection Authors Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free...

SaveExploits0References1
OpenVAS
OpenVAS
•added 2009/05/10 12:00 a.m.•10 views

TinyWebGallery Detection

The TinyWebGallery, a free php based photo album / gallery is running at this host. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

7.3AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2009/05/05 12:00 a.m.•22 views

Coppermine Photo Gallery 1.4.21 XSS

Coppermine Photo Gallery 1.4.21 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 29, 2009 Package: Coppermine Photo Gallery cpg1.4.21 Product homepage: http://coppermine-gallery.net/ Versions Affected: v.1.4.21 older versions are also affected Advisory:...

0.1AI score
SaveExploits0
Prion
Prion
•added 2009/05/04 7:00 p.m.•31 views

Sql injection

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

5.1CVSS8.7AI score0.00919EPSS
SaveExploits3References5Affected Software1
Prion
Prion
•added 2009/05/04 7:00 p.m.•26 views

Sql injection

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

5.1CVSS8.7AI score0.00926EPSS
SaveExploits3References4Affected Software1
NVD
NVD
•added 2009/05/04 7:00 p.m.•29 views

CVE-2008-6788

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

5.1CVSS8.2AI score0.00919EPSS
SaveExploits3References5
NVD
NVD
•added 2009/05/04 7:00 p.m.•23 views

CVE-2008-6789

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

5.1CVSS8.2AI score0.00926EPSS
SaveExploits2References4
Prion
Prion
•added 2009/05/04 7:00 p.m.•23 views

Code injection

The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php...

5.1CVSS7.4AI score0.01979EPSS
SaveExploits2References3Affected Software1
CVE
CVE
•added 2009/05/04 6:22 p.m.•70 views

CVE-2008-6788

CVE-2008-6788 concerns MindDezign Photo Gallery 2.2. The issue is a SQL injection via the id parameter in an info action to index.php, exploitable when magic_quotes_gpc is disabled. The underlying vulnerability arises from unsafeguarded input leading to arbitrary SQL execution by remote attackers...

5.1CVSS8.6AI score0.00919EPSS
SaveExploits3References5Affected Software1
CVE
CVE
•added 2009/05/04 6:22 p.m.•60 views

CVE-2008-6789

CVE-2008-6789 : A SQL injection vulnerability affects MindDezign Photo Gallery 2.2. The vulnerability is triggered by the username parameter in the login action to the admin module in index.php, allowing remote attackers to execute arbitrary SQL commands. This is a different vector from CVE-2008-...

5.1CVSS8.6AI score0.00926EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2009/05/04 6:22 p.m.•36 views

CVE-2008-6788

SQL injection vulnerability in MindDezign Photo Gallery 2.2, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in an info action to index.php...

8.2AI score0.00919EPSS
SaveExploits3References5
Cvelist
Cvelist
•added 2009/05/04 6:22 p.m.•39 views

CVE-2008-6789

SQL injection vulnerability in MindDezign Photo Gallery 2.2 allows remote attackers to execute arbitrary SQL commands via the username parameter in a login action to the admin module in index.php, a different vector than CVE-2008-6788...

8.2AI score0.00926EPSS
SaveExploits2References4
seebug.org
seebug.org
•added 2009/05/04 12:00 a.m.•69 views

Coppermine Photo Gallery css参数跨站脚本漏洞

BUGTRAQ ID: 34782 Coppermine是用PHP编写的多用途集成Web图形库脚本。 Coppermine的docs/showdoc.php文件没有正确地验证用户所提供的css参数便返回给了用户,远程攻击者可以通过提交恶意请求执行跨站脚本攻击,导致在用户浏览器会话中执行任意HTML和脚本代码。 Coppermine Photo Gallery 1.4.x Coppermine ---------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...

6.9AI score
SaveExploits0
securityvulns
securityvulns
•added 2009/05/04 12:00 a.m.•76 views

Coppermine Photo Gallery 1.4.21 Cross-Site Scripting

Coppermine Photo Gallery 1.4.21 Cross-Site Scripting Author: Gerendi Sandor Attila Date: April 29, 2009 Package: Coppermine Photo Gallery cpg1.4.21 Product homepage: http://coppermine-gallery.net/ Versions Affected: v.1.4.21 older versions are also affected Advisory:...

0.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/05/04 12:00 a.m.•5 views

CVE-2008-6790: Improper Input Validation

The admin module in MindDezign Photo Gallery 2.2 allows remote attackers to add administrative users and gain privileges via a modified username parameter in an edit account action to index.php...

5.1CVSS5.8AI score0.01979EPSS
SaveExploits2References2
Rows per page
Query Builder