CVE-2008-4336: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to inject arbitrary web script or HTML via the apaalbumID parameter...

CVE-2008-4335: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in album.php in Atomic Photo Album APA 1.1.0pre4 allows remote attackers to execute arbitrary SQL commands via the apaalbumID parameter...

CVE-2008-3668: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...

CVE-2008-3386: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086...

Unfixed XSS vulnerability at www.thriftstoreskiparty.com

Security researcher IHZTEAM, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.thriftstoreskiparty.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

CVE-2008-1162

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

CVE-2008-1162: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in album.php in PHP WEB SCRIPT Dynamic Photo Gallery 1.02 allows remote attackers to execute arbitrary SQL commands via the albumID parameter...

CVE-2006-5803: Undefined Security Weakness

PHP remote file inclusion vulnerability in modules/mxsmartor/album.php in the mxBB Smartor Album module 1.02 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the modulerootpath parameter...