CVE-2006-2186

zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the 1 /photos/themes/default/ and 2 /photos/themes/testing/ URIs, which reveals the path in an error message...

CVE-2006-2187

Multiple cross-site scripting XSS vulnerabilities in zenphoto 1.0.1 beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 a parameter in i.php, and the 2 album and 3 image parameters in index.php...

CVE-2006-2186

zenphoto 1.0.1 beta and earlier allow remote attackers to obtain sensitive information via a direct request for the 1 /photos/themes/default/ and 2 /photos/themes/testing/ URIs, which reveals the path in an error message...

CVE-2006-2186

Affected product: zenphoto 1.0.1 beta and earlier. The vulnerability is an information-disclosure flaw where remote attackers can obtain sensitive data by directly requesting the URIs /photos/themes/default/ or /photos/themes/testing/, causing an error message that reveals the path. Impact is par...

CVE-2006-2187

CVE-2006-2187 describes multiple cross-site scripting (XSS) vulnerabilities in zenphoto versions 1.0.1 beta and earlier. The issues allow remote attackers to inject arbitrary web script or HTML through: (1) the a parameter in i.php, and (2) the album and (3) the image parameters in index.php. NVD...

zenphoto Multiple Path Disclosure and Cross Site Scripting Vulnerabilities

Hi all, I've found several vulnerabilities in zenphoto, which is a great and simple photo gallery. I notified the team a month ago, and the new release zenphoto 1.0.2 beta fixes all the vulnerabilities. Thanks to the team for their great application and the fixes...

ZenPhoto 0.91.0 - index.php Multiple Cross-Site Scripting Vulnerabilities

ZenPhoto 0.91.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17779/info Zenphoto is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these...

ZenPhoto 0.91.0 - i.php?a Cross-Site Scripting

ZenPhoto 0.91.0 - i.php?a Cross-Site Scripting source: https://www.securityfocus.com/bid/17779/info Zenphoto is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

ZenPhoto 0.9/1.0 - 'i.php?a' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17779/info Zenphoto is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...

ZenPhoto 0.9/1.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/17779/info Zenphoto is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an...