CVE-2008-1536

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1536: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in Pictures Pro aka Tim Grissett Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information...

[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-9.fc8

gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...

RunCMS Module Photo 3.02 (cid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= RunCMS Module Photo 3.02 cid Remote SQL Injection Vulnerability ================================================================= RunCMS Module Photo 3.02 SQL injection DORK...

RunCMS Module Photo 3.02 - cid SQL Injection

RunCMS Module Photo 3.02 - cid SQL Injection RunCMS Module Photo 3.02 SQL injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAÄ°L : [email protected] DORK 1 : allinurl: "modules/photo/viewcat.php?id" DORK 2 :...

RunCMS Module Photo 3.02 - 'cid' SQL Injection

RunCMS Module Photo 3.02 SQL injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAÄ°L : [email protected] DORK 1 : allinurl: "modules/photo/viewcat.php?id" DORK 2 : inurl:photo "powered by runcms" EXPLOIT : admin...

Sql injection

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

Directory traversal

Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot forward slash in the GET command...

CVE-2008-1162

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

CVE-2008-1162

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

CVE-2008-1169

The connected documents confirm a directory traversal vulnerability in the embedded HTTP server of SCI Photo Chat Server 3.4.9 and earlier. The flaw allows remote attackers to read arbitrary files by supplying ".." or "../" in the GET command. Affected component: embedded HTTP server within SCI P...

CVE-2008-1162: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

CVE-2008-1169: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot forward slash in the GET command...

Dynamic photo gallery 1.02 (albumID) Remote SQL Injection Vulnerability

No description provided by source. Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link:...

dynamic-sql.txt

Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...

Dynamic photo gallery V1.02 SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...

Dynamic photo gallery 1.02 (albumID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================================= Dynamic photo gallery 1.02 albumID Remote SQL Injection Vulnerability ======================================================================= Aria-Security Team...

Dynamic photo Gallery 1.02 - 'albumID' SQL Injection

Aria-Security Team http://Aria-Security.Net ---------------------------- Shoutz: Aura, imm02rtal, NULL, Kinglet And all our staff Vendor: http://www.phpwebscript.net/dynamicphotogallery/foto-gallery.php Original Link: http://forum.aria-security.net/showthread.php?p=1521 PoC:...

CVE-2008-0939

Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...

CVE-2008-0939

Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album WPPA before 1.1 plugin for WordPress allow remote attackers to execute arbitrary SQL commands via 1 the photo parameter to index.php, used by the wppaphotoname function; or 2 the album parameter to index.php, used by the...