EUVD-2006-1415

Malware in sbrugna...

EUVD-2005-4290

Malware in sbrugna...

EUVD-2007-1463

Malware in sbrugna...

EUVD-2008-2758

Malware in sbrugna...

EUVD-2008-2759

Malware in sbrugna...

Absolute Image Gallery 2.0 (gallery.asp categoryid) SQL Injection Vuln

No description provided by source...

Absolute Image Gallery XE Default Password

Title : Absolute Image Gallery XE Default password Vulnerability Author : EN|GMA7 By : SuliMan Tested on : windows vista Homepage : www.enigma7.net Contact : [email protected] Thanks to : Zaid - Mohammad - Hussain Software Link :...

Sql injection

SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2008-2765

SQL injection vulnerability in gallery.asp in Xigla Absolute Image Gallery XE allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2008-2766

The CVE-2008-2766 entry concerns Xigla Absolute Image Gallery XE, with a cross-site scripting (XSS) vulnerability affecting the admin/search.asp and gallery.asp endpoints. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The provided documents iden...

CVE-2008-2766

Cross-site scripting XSS vulnerability in Xigla Absolute Image Gallery XE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in 1 admin/search.asp and 2 gallery.asp...

CVE-2008-2765

The CVE-2008-2765 entry concerns a SQL injection in the gallery.asp component of Xigla Absolute Image Gallery XE. The vulnerability is triggered by the categoryid parameter in a viewimage action, enabling remote attackers to execute arbitrary SQL commands. This document set confirms the affected ...

absolute-screwups.txt

www.BugReport.ir AmnPardaz Security Research Team Title: Xigla Multiple Products - Multiple Vulnerabilities Vendor: http://www.xigla.com/ Exploit: N/A Impact: Medium Fix: N/A Original Advisory: http://bugreport.ir/index.php?/41 1. Description: Xigla company has several web based products From...

aig-mssql.txt

Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug : http://localhost/script/gallery.asp?action=viewimage&categoryid=-SQL Inj-...

Sql injection

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2007-1469

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2007-1469

SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter in a viewimage action...

CVE-2007-1469

CVE-2007-1469 describes an SQL injection in the gallery.asp component of Absolute Image Gallery 2.0. The vulnerability is triggered via the categoryid parameter in a viewimage action, allowing remote attackers to execute arbitrary SQL commands. The entry is supported by NVD and CVE records, which...

Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit

Absolute Image Gallery Gallery.ASP categoryid MSSQL Injection Exploit Type : SQL Injection Release Date : 2007-03-15 Product / Vendor : Absolute Image Gallery http://www.xigla.com/absoluteig/ Bug : http://localhost/script/gallery.asp?action=viewimage&categoryid=-SQL Inj-...

Absolute Image Gallery 2.0 (gallery.php categoryid) SQL Injection Vuln

Exploit for asp platform in category web applications ====================================================================== Absolute Image Gallery 2.0 gallery.php categoryid SQL Injection Vuln ====================================================================== Absolute Image Gallery Gallery.A...