CVE-2005-1629

SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter...

CVE-2005-1629

Photopost PHP Pro contains a SQL injection in member.php via the verifykey parameter, allowing remote attackers to execute arbitrary SQL commands. Root cause: unsanitized input used in SQL queries. Affected component: Photopost PHP Pro (member.php). Exploitation status is not detailed in the prov...

CVE-2005-1629: Undefined Security Weakness

SQL injection vulnerability in member.php for Photopost PHP Pro allows remote attackers to execute arbitrary SQL commands via the verifykey parameter...

PhotoPost PHP Pro < 5.02 RC4 member.php uid Parameter SQL Injection

Binary data 2903.prm...

CVE-2004-1870

PhotoPost PHP Pro 4.6.x and earlier are affected by multiple SQL injection vulnerabilities. The CVE entry references attackers being able to extract user passwords via parameters such as photo (addfav.php, comments.php), credit (comments.php), cat (index.php, showgallery.php), ppuser (showgallery...

CVE-2004-1870

Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the 1 photo parameter to addfav.php, 2 photo parameter to comments.php, 3 credit parameter to comments.php, 4 cat parameter to index.php, 5 ppuser parameter to...

CVE-2004-1871

PhotoPost PHP Pro 4.6.x and earlier are affected by multiple cross-site scripting (XSS) vulnerabilities. Exploitation targets showmembers.php via the parameters ppuser, password, stype, perpage, sort, page, si, cat, and also the photo/album name/description fields. Affected product/version: Photo...

CVE-2004-1871

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ppuser, 2 password, 3 stype, 4 perpage, 5 sort, 6 page, 7 si, or 8 cat parameters to showmembers.php, or the 9 photo name, 10 photo...

CVE-2004-1870: Undefined Security Weakness

Multiple SQL injection vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to gain users' passwords via the 1 photo parameter to addfav.php, 2 photo parameter to comments.php, 3 credit parameter to comments.php, 4 cat parameter to index.php, 5 ppuser parameter to...

CVE-2004-1871: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 4.6.x and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ppuser, 2 password, 3 stype, 4 perpage, 5 sort, 6 page, 7 si, or 8 cat parameters to showmembers.php, or the 9 photo name, 10 photo...

CVE-2005-0778

PhotoPost PHP 5.0 RC3 does not fully verify that an uploaded file is an image file, which allows remote attackers to inject arbitrary Javascript by uploading non-image files with an image extension such as .gif...

CVE-2005-0777

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP 5.0 RC3 allow remote attackers to inject arbitrary web script or HTML via 1 the checktags function or 2 the editbio field in the user profile...

CVE-2005-0928

Multiple cross-site scripting XSS vulnerabilities in PhotoPost PHP Pro 5.x allow remote attackers to inject arbitrary web script or HTML via the 1 cat, 2 password, 3 ppuser, 4 sort, or 5 si parameters to showgallery.php, the 6 ppuser, 7 sort, or 8 si parameters to showmembers.php, or 9 the photo...

CVE-2005-0775

The reportpost action in misc.php for PhotoPost PHP 5.0 RC3 does not limit the logging data that is sent to the administrator, which allows remote attackers to send large amounts of email to the administrator...

CVE-2005-0929

SQL injection vulnerability in PhotoPost PHP Pro 5.x may allow remote attackers to execute arbitrary SQL commands via 1 the sl parameter to showmembers.php or 2 the photo parameter to showphoto.php...

CVE-2005-0776

adm-photo.php in PhotoPost PHP 5.0 RC3 does not properly verify administrative privileges before manipulating photos, which could allow remote attackers to manipulate other users' photos...

Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.

Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software. Date: March 29, 2005 Summary: There are multiple sql injection, xss...

PhotoPost PHP Detection

The remote host is running PhotoPost PHP, a picture gallery software suite written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17648; scriptversion"1.15"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"PhotoPos...

CVE-2005-0928

CVE-2005-0928 : Multiple cross-site scripting (XSS) vulnerabilities in PhotoPost PHP Pro 5.x allow remote injection of script/HTML via parameters to showgallery.php (cat, password, ppuser, sort, si), showmembers.php (ppuser, sort, si), or slideshow.php (photo). Affects PhotoPost PHP Pro 5.x; expl...

CVE-2005-0929

PhotoPost PHP Pro 5.x contains a SQL injection vulnerability exploitable via the sl parameter in showmembers.php or the photo parameter in showphoto.php, allowing remote attackers to potentially execute arbitrary SQL commands. The issue is caused by unsafely handling user-supplied input in these ...