EUVD-2006-2182

Malware in sbrugna...

Albinator 2.0.8 dlisting.php cid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/17826/info Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code...

CVE-2006-2182

CVE-2006-2182 describes multiple PHP remote file inclusion vulnerabilities in albinator 2.0.8 and earlier, affecting the scripts eday.php, eshow.php, and forgot.php. The root cause is that the Config_rootdir parameter can be supplied via a URL, allowing remote attackers to execute arbitrary PHP c...

albinator <= 2.0.8 Remote File Inclusion Vuln and XSS

albinator = 2.0.8 Remote File Inclusion Vuln and XSS Vuln. discovered by :VietMafia & r0t Pridels Sec Crew Date: 3 may 2006 vendor:http://www.albinator.com/ affected versions:2.8 and prior orginal advisory:http://pridels.blogspot.com/2006/05/albinator-208-remote-file-inclusion.html Vuln...

Albinator 2.0.8 - showpic.php?preloadSlideShow Cross-Site Scripting

Albinator 2.0.8 - showpic.php?preloadSlideShow Cross-Site Scripting source: https://www.securityfocus.com/bid/17826/info Albinator is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issue...