CVE-2014-3905

Cross-site scripting XSS vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-3905

The CVE-2014-3905 issue affects tenfourzero Shutter version 0.1.4. It is described as a cross-site scripting (XSS) vulnerability that could allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The included sources indicate that an administrator viewing a maliciou...

CVE-2014-3904

CVE-2014-3904 affects Shutter 0.1.4 (tenfourzero). The vulnerability is a SQL injection in lib/admin.php that enables remote attackers to execute arbitrary SQL commands via unspecified vectors. Impact is described as possible arbitrary SQL execution with administrative context, potentially affect...

CVE-2014-3904: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lib/admin.php in tenfourzero Shutter 0.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-3905: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in tenfourzero Shutter 0.1.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Shutter vulnerable to SQL injection

Overview Shutter provided by tenfourzero is a web package allowing users to share their photos. lib/admin.php in Shutter contains a SQL injection vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

JVN#04455183: Shutter vulnerable to cross-site scripting

Shutter provided by tenfourzero is a web package allowing users to share their photos. Shutter contains a cross-site scripting vulnerability, which can be exploited through the SQL injection vulnerability JVN48039501. Impact If an administrator views a malicious page while logged in, an arbitrary...

JVN#48039501: Shutter vulnerable to SQL injection

Shutter provided by tenfourzero is a web package allowing users to share their photos. lib/admin.php in Shutter contains a SQL injection vulnerability. Impact If an administrator views a malicious page while logged in, an arbitrary SQL command may be executed. Solution Uninstall the Software...

tenfourzero.net Shutter 0.1.4 'admin.html' Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38849/info tenfourzero.net's Shutter is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Shutter 0.1.1 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! --...

HTB22967: Multiple SQL Injection in Shutter

Vulnerability ID: HTB22967 Reference: http://www.htbridge.ch/advisory/sqlinjectioninshutter.html Product: Shutter Vendor: http://shutter.tenfourzero.net/ http://shutter.tenfourzero.net/ Vulnerable Version: 0.1.4 Vendor Notification: 19 April 2011 Vulnerability Type: SQL Injection Risk level: High...

SQL Injection Vulnerability in Shutter

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Shutter which could be exploited to perform SQL injection attacks. 1 SQL injection vulnerability in Shutter The vulnerability exists due to input sanitation errors in the "albumID" parameter in index.html. A remote attacker...

Shutter 0.1.4 Blind SQL Injection

Exploit Title: Shutter 0.1.4 Blind SQL Injection Date: March 18, 2010 Author: Blake Software Link: http://sourceforge.net/projects/shutter-php/files/shutter/v0.1.4/shutter0.1.4.zip/download Version: version 0.1.4 The albumID and photoID parameters are vulnerable to SQL Injection. POC:...

Shutter 0.1.4 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================== Shutter 0.1.4 Blind SQL Injection Vulnerability =============================================== Exploit Title: Shutter 0.1.4 Blind SQL Injection Date: March 18, 2010 Author: Blake Software...

tenfourzero.net Shutter 0.1.4 - admin.html Multiple SQL Injections

tenfourzero.net Shutter 0.1.4 - admin.html Multiple SQL Injections source: https://www.securityfocus.com/bid/38849/info tenfourzero.net's Shutter is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

tenfourzero.net Shutter 0.1.4 - 'admin.html' Multiple SQL Injections

source: https://www.securityfocus.com/bid/38849/info tenfourzero.net's Shutter is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Sql injection

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2009-1650

Multiple SQL injection vulnerabilities in photos.php in Shutter 0.1.1 allow remote attackers to execute arbitrary SQL commands via the 1 albumID, 2 tagID, and 3 photoID parameters to index.html...

CVE-2009-1650

CVE-2009-1650 affects Shutter 0.1.1: Multiple SQL injection vulnerabilities in photos.php allow remote attackers to inject SQL via albumID, tagID, or photoID parameters to index.html. CVSS v2 base score 7.5 (HIGH) with partial impact on confidentiality, integrity, and availability. No remediation...