coppermine122.txt

---------------------------------------------------- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities

---------------------------------------------------- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

CVE-2006-3688

SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3688

SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2006-3688

CVE-2006-3688 describes an SQL injection in Room.php of Francisco Charrua Photo-Gallery 1.0, exploitable via the id parameter to execute arbitrary SQL commands. The provided documents do not specify affected product versions beyond 1.0, nor any remediation or mitigations. No exploitation details ...

CVE-2006-3688: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Room.php in Francisco Charrua Photo-Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

carspace.txt

Carspace.com Homepage: http://www.carspace.com Affected files: Input boxes of registering Login boxes sending mail input boxes. Searching for photos. XSS vuln with cookie disclosure via ErrorMessage when registering: http://www.carspace.com/?register@@!ErrorMessage=. Screenshots:...

Dating biz@ dating script v1.0 - XSS

Custom dating biz@ dating script v1.0 Homepage: http://www.e-cbd.biz/phpdatingscript.html Affected files: Profiles userview.php photocreate.php --------------------------------- The edit profile form can be spoofed and a user can enter any data he wishes and it will update his profile. The "Choos...

CVE-2006-3064

SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...

CVE-2006-3064

The CVE-2006-3064 entry affects Coppermine Photo Gallery (CPG) 1.4.8; a SQL injection exists in the add_hit function within include/function.inc.php when Keep detailed hit statistics is enabled. Remote attackers can potentially execute arbitrary SQL commands by supplying crafted values in the Ref...

CVE-2006-3064

SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...

CVE-2006-3064: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the addhit function in include/function.inc.php in Coppermine Photo Gallery CPG 1.4.8, when "Keep detailed hit statistics" is enabled, allows remote attackers to execute arbitrary SQL commands via the 1 referer and 2 user-agent HTTP headers...

CVE-2006-3032

Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...

CVE-2006-3032

CVE-2006-3032 describes multiple cross-site scripting (XSS) vulnerabilities in Xtreme ASP Photo Gallery, affecting versions 1.05 and earlier (and possibly 2.0 trial). The XSS can be triggered via the parameters (1) catname and (2) total in displaypic.asp, and (3) catname in displaythumbs.asp, all...

CVE-2006-3032

Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...

CVE-2006-3032: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Xtreme ASP Photo Gallery 1.05 and earlier, and possibly 2.0 trial, allow remote attackers to inject arbitrary web script or HTML via the 1 catname and 2 total parameters in a displaypic.asp, and the 3 catname parameter in b displaythumbs.asp...

CVE-2006-2993

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...

CVE-2006-2992

Cross-site scripting XSS vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keym parameter...

CVE-2006-2992

CVE-2006-2992 describes a cross-site scripting (XSS) vulnerability in the page display.asp of My Photo Scrapbook 1.0 and earlier, where an attacker can inject arbitrary web script or HTML via the key_m parameter. The affected software is My Photo Scrapbook 1.0 and earlier; the underlying cause is...

CVE-2006-2993

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...