MunkyScripts Simple Gallery - SQL Injection

coded by ahmadbady //=========================================================================== // Topic : MunkyScripts Simple Gallery // Bug type : SQL Injection Vulnerability // Advisory : //=========================================================================== // Author : ItSecTeam //...

CVE-2010-1019

SQL injection vulnerability in the Simple Gallery sksimplegallery extension 0.0.9 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Simple Gallery sksimplegallery extension 0.0.9 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Simple Gallery sksimplegallery extension 0.0.9 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1020

The CVE-2010-1020 entry concerns a Cross-site Scripting (XSS) vulnerability in the TYPO3 Simple Gallery extension (sk_simplegallery) version 0.0.9 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, affecting the extension on TYPO3. The re...

CVE-2010-1019

The CVE-2010-1019 entry concerns the TYPO3 Simple Gallery (sk_simplegallery) extension, affected in version 0.0.9 and earlier. The vulnerability is an SQL injection in the extension, allowing remote attackers to execute arbitrary SQL commands via unspecified vectors. Across connected sources (NVD...

CVE-2010-1019

SQL injection vulnerability in the Simple Gallery sksimplegallery extension 0.0.9 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-1020

Cross-site scripting XSS vulnerability in the Simple Gallery sksimplegallery extension 0.0.9 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-6084

CVE-2008-6084 affects Iamma Simple Gallery 1.0 and 2.0. An unrestricted file upload flaw in pages/download.php lets remote attackers upload a file with an executable extension and then access it under the uploads directory to execute PHP code. NVD lists a MEDIUM severity (CVSS v2 base score 6.8) ...

Iamma Simple Gallery 1.0/2.0 Arbitrary File Upload Vulnerability

No description provided by source. Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...

Iamma Simple Gallery 1.0/2.0 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications...

Iamma Simple Gallery 1.02.0 - Arbitrary File Upload

Iamma Simple Gallery 1.02.0 - Arbitrary File Upload Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...

iamma-upload.txt

Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...

Iamma Simple Gallery 1.0/2.0 - Arbitrary File Upload

Found by: X0r Iamma Simple Gallery Arbitrary File Upload Version: 1,2 ? Email: evolutionteam.x0atgmaildotcom Script Download:http://www.matteoiammarrone.com/public/modules.php?name=Downloads&dop=getit&lid=4 Script Download...

CVE-2008-1698

CVE-2008-1698 is an XSS vulnerability in Simple Gallery 2.2, exploitable via the album parameter to index.php in gallery.php. The occurrence is described as a remote script/HTML injection. The NVD entry lists a MEDIUM risk (CVSS v2 base score 4.3) with network access and no authentication require...

CVE-2008-1698

Cross-site scripting XSS vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-1124

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. dot dot in the f parameter...