CVE-2006-2993

CVE-2006-2993 affects My Photo Scrapbook 1.0 and earlier. The vulnerability consists of multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands via the value of the key parameter in two pages: Displayview.asp and Details_Photo_bv.asp. The connected documents do ...

CVE-2006-2993

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...

[KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack

ORIGINAL ADVISORY: http://myimei.com/security/2006-06-11/copperminephotogallery148-addhit-function-sqlinjection-attack.html HTTP://KAPDA.IR ——-Summary——- Software: CPG Coppermine Photo Gallery Software’s Web Site: http://coppermine.sourceforge.net/ Versions: 1.4.8.stable Class: Remote Status:...

CVE-2006-2993: Undefined Security Weakness

Multiple SQL injection vulnerabilities in My Photo Scrapbook 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the key parameter in 1 Displayview.asp and 2 DetailsPhotobv.asp...

CVE-2006-2992: Undefined Security Weakness

Cross-site scripting XSS vulnerability in display.asp in My Photo Scrapbook 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the keym parameter...

CVE-2006-2976

Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...

CVE-2006-2976

CVE-2006-2976 affects Coppermine Photo Gallery, specifically the file usermgr.php, with the vulnerability present in releases prior to 1.4.7. The available documents describe an unspecified vulnerability with unknown impact and remote attack vectors, potentially tied to authorization/authenticati...

CVE-2006-2976

Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...

CVE-2006-2976: Undefined Security Weakness

Unspecified vulnerability in usermgr.php in Coppermine Photo Gallery before 1.4.7 has unknown impact and remote attack vectors, possibly related to authorization/authentication errors...

[SA20465] Coppermine Photo Gallery usermgr.php Unspecified Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

CVE-2006-2680

Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...

CVE-2006-2680

CVE-2006-2680 affects the AZ Photo Album Script Pro. The vulnerability is a cross-site scripting (XSS) flaw in the index.php file that allows remote attackers to inject arbitrary web script or HTML via the bad parameter name gazpart. The provided data indicates no explicit exploit code or in-the-...

CVE-2006-2680

Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...

CVE-2006-2680: Undefined Security Weakness

Cross-site scripting XSS vulnerability in index.php in AZ Photo Album Script Pro allows remote attackers to inject arbitrary web script or HTML via the gazpart parameter...

AZ Photo Album Script Pro

AZ Photo Album Script Pro Homepage: http://www.php4script.com/php-photo-album-script/ Description: A powerful PHP/MySQL photo album photo gallery script with a lot of features. Effected files: index.php Exploits & Vulns: Captivate is prone to a cross-site scripting vulnerability. This issue is du...

FreeBSD : coppermine -- Multiple File Extensions Vulnerability (0b628470-e9a6-11da-b9f4-00123ffe8333)

Secunia reports : Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious users to compromise a vulnerable system. The vulnerability is caused due to an error in the handling of file uploads where a filename has multiple file extensions. This can be exploited to upload...

coppermine -- Multiple File Extensions Vulnerability

Secunia reports: Coppermine Photo Gallery have a vulnerability, which can be exploited by malicious users to compromise a vulnerable system. The vulnerability is caused due to an error in the handling of file uploads where a filename has multiple file extensions. This can be exploited to upload...

ChipmunkBlogger improper input sanitizing

ChipmunkBlogger improper input sanitizing Discovered by: Nomenumbra Date: 6/4/2006 impact:moderate privilege escalation,possible defacement Posts potentially made by lower-privilege members and profile names aren't properly sanitized, thus resulting in being vulnerable to the following kind of XS...

[Full-disclosure] [XPA] - Albinator Pro <= 2.0.8 - Remote Command Execution Vulnerability

=========================================================================== XOR Crew :: Security Advisory 0day GIVE AWAY date? 2/20/2006 =========================================================================== Albinator Pro = 2.0.8 - Remote Command Execution Vulnerability...

CVE-2006-2079

Cross-site scripting XSS vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...