26 matches found
SQL Injection Vulnerability in List_picture Parameter of SMiCMS Government Website System
State Micro CMS is one of the mainstream CMS systems in China, and is also the open source platform provider in the field of PHP in Southern China. State Micro CMS government website system listpicture parameter SQL injection vulnerability, the vulnerability is due to the failure of the user to...
UBUNTU-CVE-2016-3828
decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-08-01 mishandles invalid PPS and SPS NAL units, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 28835995...
Piwigo 'rate_picture' function SQL injection vulnerability
Piwigo is a photo album script written in PHP. Piwigo suffers from a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by taking the picturephp rate parameter...
Directory traversal
Directory traversal vulnerability in joovili.images.php in Joovili 3.0.0 through 3.0.6 allows remote attackers to read arbitrary files via a .. dot dot in the picture parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter...
