PhotoPost 4.6 - Multiple Vulnerabilities

PhotoPost 4.6 - Multiple Vulnerabilities PhotoPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc Product: PhotoPost Version: = 4.6 Website: http://www.photopost.com/ BID: 9994 CVE: CVE-2004-1870 CVE-2004-1871 OSVDB: 10261 10262 10263 10264 10265 10266 10267 4771 SECUNIA: 11241 Description:...

CVE-2004-0239

CVE-2004-0239 affects PhotoPost PHP Pro up to version 4.6. The vulnerability is a SQL injection in the showphoto.php script, exploitable via the photo parameter, which allows remote attackers to access unauthorized data. The issue stems from unsanitized input used in a database query. Affected so...

CVE-2004-0250

SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via 1 the product parameter in showproduct.php or 2 the cat parameter in showcat.php...

CVE-2004-0250

The CVE-2004-0250 issue is a SQL injection in PhotoPost PHP Pro 4.6 and earlier. The vulnerability allows remote attackers to gain privileges via user-controlled inputs in showproduct.php (product parameter) or showcat.php (cat parameter). The describes affected component is the PHP-based PhotoPo...

CVE-2004-0239

SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable...

ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql Injection Vulnerability

ZH2004-03SA security advisory: Photopost PHP Pro 4.6 Sql Injection Vulnerability Published: 02 february 2004 Released: 02 february 2004 Name: Photopost PHP Pro Affected Systems: 4.6 and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs - [email protected]...

Photopost PHP Pro photo Parameter SQL Injection

The version of Photopost PHP Pro installed on the remote host fails to sanitize user-supplied input to the 'photo' parameter of the 'showphoto.php' script before using it in a database query. An unauthenticated attacker may be able to exploit this issue to uncover sensitive information, modify...

ZH2004-03SA.txt

ZH2004-03SA security advisory: Photopost PHP Pro 4.6 Sql Injection Vulnerability Published: 02 february 2004 Released: 02 february 2004 Name: Photopost PHP Pro Affected Systems: 4.6 and prior versions Issue: Sql Injection Vulnerability Author: G00db0y from Zone-h Security Labs - [email protected]...