CVE-2017-6391: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "adminconsole/web/tools/SimpleJWPlayer.php" URL, the "adminconsole/web/tools/AkamaiBroadcaster.php" URL, the "adminconsole/web/tools/bigRedButton.php...

CVE-2017-6392: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Kaltura server Lynx-12.11.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "server-Lynx-12.11.0/adminconsole/web/tools/XmlJWPlayer.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the contex...

CVE-2007-4207

CVE-2007-4207 affects Gallery In A Box, via an SQL injection in admin_console/index.asp. The vulnerability allows remote attackers to execute arbitrary SQL commands through the Username or Password fields (potentially txtUsername/txtPassword). Exploitation is described as network-based and unauth...

CVE-2007-4207: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in adminconsole/index.asp in Gallery In A Box allows remote attackers to execute arbitrary SQL commands via the 1 Username or 2 Password field. NOTE: these fields might be associated with the txtUsername and txtPassword parameters...