iFoto, CSS-based GD2 photo gallery <= 1.0: Remote File Disclosure Vulnerability

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- iFoto, CSS-based GD2 photo gallery = 1.0: Remote File Disclosure Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- $ Program: iFoto, CSS-based GD2 photo gallery $ File...

CVE-2008-4370

Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...

CVE-2008-4369

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Sql injection

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...

CVE-2008-4369

CVE-2008-4369 corresponds to a SQL injection vulnerability in the Availscript Photo Album’s pics.php. The vulnerability is triggered via the sid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists the impact as Partial confidentiality, integrity, and availa...

CVE-2008-4370

CVE-2008-4370 describes multiple cross-site scripting (XSS) vulnerabilities in the Availscript Photo Album. According to the provided documents, an attacker can inject arbitrary web script or HTML through the (1) sid parameter to pics.php and (2) the a parameter to view.php. The affected product ...

CVE-2008-4369

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2008-4369: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in pics.php in Availscript Photo Album allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2008-4370: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Availscript Photo Album allow remote attackers to inject arbitrary web script or HTML via the 1 sid parameter to pics.php and the 2 a parameter to view.php...

CVE-2008-4336

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

CVE-2008-4335

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

Sql injection

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

CVE-2008-4335

The CVE-2008-4335 entry relates to Atomic Photo Album (APA) 1.1.0pre4. The vulnerability is a SQL injection in album.php, exploitable via the apa_album_ID parameter, which allows a remote attacker to execute arbitrary SQL commands. The issue arises from improper input handling in the affected scr...

CVE-2008-4335

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

CVE-2008-4336

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

CVE-2008-4336

The CVE-2008-4336 entry concerns Atomic Photo Album (APA) 1.1.0pre4, where a Cross-site Scripting (XSS) flaw exists in album.php. The vulnerability enables remote attackers to inject arbitrary web script or HTML by manipulating the apa_album_ID parameter. The NVD data indicates a medium base_scor...

CVE-2008-4336: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

CVE-2008-4335: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...